StepSecurity Logo
StepSecurity
LoginStart free
gradle/actions/setup-gradle

gradle/actions/setup-gradle

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

GitHubGitHub Repository

340 stars

Node.js

Node Action

Maintained action available

Score updated 20 hours ago

GitHub Actions security score

gradle/actions/setup-gradle

Score

8/10

Pinnable

Yes

License

Other

Maintained

30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

0 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

AI analysis

No Security findings

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 70912 open-source projects

Security Policy

security policy file detected

Networking Behavior of gradle/actions/setup-gradle

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
edge.pkg.stUnknown
local.less.buildUnknown
maven.pkg.stUnknown
gradle.pkg.stUnknown
dl.less.buildUnknown
plugins.gradle.orgGradleGradle
maven.pkg.jetbrains.spaceUnknown
d3ob9fqp587by1.cloudfront.netUnknown
elide-snapshots.storage-download.googleapis.comGoogleGoogle
androidx.devUnknown
agent.less.buildUnknown
plugins-artifacts.gradle.orgGradleGradle
scans-in.gradle.comUnknown
download.jetbrains.comUnknown
download-cdn.jetbrains.comUnknown
nodejs.orgUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
registry.npmjs.orgnpm Registrynpm Registry
api.foojay.ioUnknown
gradle.less.buildUnknown
sonarcloud.ioSonarSonar
scanner.sonarcloud.ioSonarSonar
ea6ne4j2sb.execute-api.eu-central-1.amazonaws.comSonarSonar
sc-cleancode-sensorcache-eu-central-1-prod.s3.amazonaws.comSonarSonar
dc.services.visualstudio.comUnknown
keyserver.ubuntu.comUbuntuUbuntu
pgp.mit.eduUnknown
keys.openpgp.orgUnknown
services.gradle.orgGradleGradle
repo.maven.apache.orgUnknown
jcenter.bintray.comUnknown
download.oracle.comUnknown
dl.google.comGoogleGoogle
index.crates.ioUnknown
crates.ioUnknown
static.crates.ioUnknown
repo1.maven.orgUnknown
developer.android.comUnknown
kotlinlang.orgUnknown
docs.oracle.comUnknown
maven.google.comUnknown
commondatastorage.googleapis.comGoogleGoogle
jpms.pkg.stUnknown
npm.pkg.stUnknown
ha.pool.sks-keyservers.netUnknown
storage.googleapis.comGoogleGoogle
cli.less.buildUnknown
maven.elide.devUnknown
status.gradle.comUnknown
raw.githubusercontent.comGitHubGitHub
oss.sonatype.orgUnknown
api.sonarcloud.ioSonarSonar
caffeine.gradle-enterprise.cloudUnknown
downloads.gradle.orgGradleGradle
release-assets.githubusercontent.comGitHubGitHub
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
pypi.orgPython RegistryPython Registry
gdmf.apple.comUnknown
xp.apple.comUnknown
dns.msftncsi.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
ocsp.digicert.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
incoming.telemetry.mozilla.orgUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
fs.microsoft.comMicrosoftMicrosoft
client.wns.windows.comUnknown
api.github.comGitHubGitHub
swscan.apple.comUnknown
fbs.smoot.apple.comUnknown
xp.itunes-apple.com.akadns.netUnknown
swdist.apple.comUnknown
apple-relay.fastly-edge.comUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
valid.apple.comUnknown
pancake.apple.comUnknown
mesu.apple.comUnknown
ocsp2.apple.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
assets-mercury.mzstatic.comUnknown
cds.apple.comUnknown
ocsp2.g.aaplimg.comUnknown
api.apple-cloudkit.comUnknown
metrics.icloud.comUnknown
humb.apple.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
experiments.apple.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
au.download.windowsupdate.comUnknown
device-config.pcms.apple.comUnknown
ipcdn.apple.comUnknown
calendars.icloud.comUnknown
gateway.icloud.comUnknown
ecs.office.comUnknown
apps.mzstatic.comUnknown
updates.cdn-apple.comUnknown
configuration.apple.comUnknown
bag.itunes.apple.comUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
amp-api.media.apple.comUnknown
swdist.apple.com.akadns.netUnknown
validation-v2.sls.microsoft.comMicrosoftMicrosoft
login.live.comUnknown
news-edge.apple.comUnknown
c.apple.newsUnknown
configuration.apple.com.akadns.netUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
ipcdn-lb.apple.com.akadns.netUnknown
ocsp.sectigo.comUnknown
configuration.ls.apple.comUnknown
apple-relay.cloudflare.comUnknown
0.pool.ntp.orgUnknown
bag-cdn.itunes-apple.com.akadns.netUnknown
mask-api.icloud.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
oneocsp.microsoft.comMicrosoftMicrosoft
swallow.apple.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
gateway-oblivious.apple.comUnknown
api.smoot.apple.comUnknown
ocsp.comodoca.comUnknown
init.itunes.apple.comUnknown
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
help.apple.comUnknown
wns2-bn3p.wns.windows.comUnknown
packages.microsoft.comMicrosoftMicrosoft
swdist.g.aaplimg.comUnknown
help.origin-apple.com.akadns.netUnknown
weather-edge.apple.comUnknown
dns.googleUnknown
_dns.resolver.arpaUnknown
e5977.dsce9.akamaiedge.netUnknown
adl.windows.comUnknown
configuration-lb.ls-apple.com.akadns.netUnknown
updates.g.aaplimg.comUnknown
build.shibboleth.netUnknown
repository.jboss.orgUnknown
timestamp.apple.comUnknown
appstoreconnect.apple.comUnknown
notary-submissions-prod.s3-accelerate.amazonaws.comUnknown
repo.apache.maven.orgUnknown
mask.icloud.comUnknown
swscan-cdn.apple.com.akadns.netUnknown
blob.bn9prdstrz04a.store.core.windows.netUnknown
ocsp.usertrust.comUnknown
central.sonatype.comUnknown
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudfront.docker.comUnknown
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
production.cloudflare.docker.comDockerHubDockerHub
v1.ta2.fe2cr.update.microsoft.comMicrosoftMicrosoft
gspe1-ssl.ls.apple.comUnknown
itunes.apple.comUnknown
lcdn-locator.apple.comUnknown
configuration.g.aaplimg.comUnknown
ab.apple.com.akadns.netUnknown
helm.releases.hashicorp.comUnknown
eclipse-tractusx.github.ioUnknown
caffeine.develocity.cloudUnknown
sas.pcms.apple.comUnknown
iadsdk.apple.comUnknown
token.safebrowsing.appleUnknown
proxy.safebrowsing.appleUnknown
xp.g.aaplimg.comUnknown
publicassets.cdn-apple.comUnknown
ml.cdn-apple.comUnknown
cdn-h3.g.aaplimg.comUnknown
is2-ssl.mzstatic.comUnknown
is3-ssl.mzstatic.comUnknown
images-mercury.mzstatic.comUnknown
is4-ssl.mzstatic.comUnknown
is5-ssl.mzstatic.comUnknown
ipv6.msftncsi.comUnknown
ocsp.edge.digicert.comUnknown
firebasecrashlyticssymbols.googleapis.comGoogleGoogle
gdmf-ados.apple.comUnknown
fe3cr.delivery.mp.microsoft.comMicrosoftMicrosoft
cp10.cloudflare.comUnknown
ipcdn-web.apple.comUnknown
prod.ingestion-edge.prod.dataops.mozgcp.netUnknown
prod.ingestion-edge.prod.dataservices.mozgcp.netUnknown
ipv6.msftconnecttest.comUnknown
gdmf.v.aaplimg.comUnknown
ohttp-relay1.fastly-edge.comUnknown
cf.iadsdk.apple.comUnknown
stocks-data-service.apple.comUnknown
api-spotlight.smoot.apple.comUnknown
api2.smoot.apple.comUnknown
cdn.smoot.apple.comUnknown
..localmachineUnknown
ssm.eu-central-1.amazonaws.comUnknown