StepSecurity Logo
LoginStart free
gradle/gradle-build-action

gradle/gradle-build-action

Execute your Gradle build and trigger dependency submission

GitHubGitHub Repository

687 stars

Composite

Score updated 3 days ago

Composite Action Details

Pinnable

No

GitHub Actions security score

gradle/gradle-build-action

Score

7/10

License

MIT License

Maintained

project is archived

Vulnerabilities

0 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 4240 open-source projects

Security Policy

security policy file detected

Networking Behavior of gradle/gradle-build-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
repo.maven.apache.orgUnknown
plugins.gradle.orgGradleGradle
services.gradle.orgGradleGradle
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
jcenter.bintray.comUnknown
plugins-artifacts.gradle.orgGradleGradle
repo.eclipse.orgUnknown
repo.gradle.orgGradleGradle
gradle.pkg.stUnknown
scans-in.gradle.comUnknown
local.less.buildUnknown
dl.google.comGoogleGoogle
maven.google.comUnknown
edge.pkg.stUnknown
index.crates.ioUnknown
repo1.maven.orgUnknown
agent.less.buildUnknown
oss.sonatype.orgUnknown
api.github.comGitHubGitHub
oauth2.googleapis.comGoogleGoogle
toolresults.googleapis.comGoogleGoogle
testing.googleapis.comGoogleGoogle
storage.googleapis.comGoogleGoogle
developer.android.comUnknown
docs.oracle.comUnknown
kotlinlang.orgUnknown
crates.ioUnknown
static.crates.ioUnknown
dl.less.buildUnknown
sonarcloud.ioSonarSonar
scanner.sonarcloud.ioSonarSonar
maven.pkg.stUnknown
buf.buildUnknown
pgp.mit.eduUnknown
keys.openpgp.orgUnknown
keyserver.ubuntu.comUbuntuUbuntu
downloads.gradle.orgGradleGradle
gradle.less.buildUnknown
download.jetbrains.comUnknown
download-cdn.jetbrains.comUnknown
elide-snapshots.storage-download.googleapis.comGoogleGoogle
picocli.infoUnknown
tuf-repo-cdn.sigstore.devSigstoreSigstore
fulcio.sigstore.devSigstoreSigstore
rekor.sigstore.devSigstoreSigstore
registry.yarnpkg.comUnknown
spdx.orgUnknown
node.pkg.stUnknown
nodejs.orgUnknown
npm.pkg.stUnknown
registry.npmjs.orgnpm Registrynpm Registry
api.foojay.ioUnknown
ea6ne4j2sb.execute-api.eu-central-1.amazonaws.comSonarSonar
sc-cleancode-sensorcache-eu-central-1-prod.s3.amazonaws.comSonarSonar
maven.pkg.github.comGitHubGitHub
static.structurizr.comUnknown
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
s01.oss.sonatype.orgUnknown
ha.pool.sks-keyservers.netUnknown
maven.pkg.jetbrains.spaceUnknown
d3ob9fqp587by1.cloudfront.netUnknown
androidx.devUnknown
s3.amazonaws.comUnknown
status.gradle.comUnknown
registry.npmmirror.comUnknown
cdn.npmmirror.comUnknown
cli.less.buildUnknown
raw.githubusercontent.comGitHubGitHub
api.nuget.orgUnknown
pastebin.comUnknown
tsu.tari.moeUnknown
ppuknbngfdrabjtitzoi5ke8rwvygwvzc.oast.funUnknown
api.sonarcloud.ioSonarSonar
clientservices.googleapis.comGoogleGoogle
safebrowsingohttpgateway.googleapis.comGoogleGoogle
redirector.gvt1.comUnknown
accounts.google.comUnknown
r3---sn-a5meknsd.gvt1.comUnknown
r5---sn-p5qddn76.gvt1.comUnknown
r5---sn-p5qddn7r.gvt1.comUnknown
r1---sn-p5qlsn7d.gvt1.comUnknown
analysis-sensorcache-eu-central-1-prod.s3.amazonaws.comSonarSonar
r1---sn-vgqsrnl6.gvt1.comUnknown
r2---sn-p5qddn7k.gvt1.comUnknown
r1---sn-vgqsrnzz.gvt1.comUnknown
r4---sn-p5qddn76.gvt1.comUnknown
r3---sn-p5qs7nsk.gvt1.comUnknown
r3---sn-p5qlsn7d.gvt1.comUnknown
r2---sn-vgqsknez.gvt1.comUnknown
r4---sn-vgqsrnzz.gvt1.comUnknown
r2---sn-vgqsknlr.gvt1.comUnknown
r5---sn-p5qlsnd6.gvt1.comUnknown
r2---sn-p5qddn7r.gvt1.comUnknown
r3---sn-p5qddn7k.gvt1.comUnknown
r2---sn-a5m7lnld.gvt1.comUnknown
pico-cli.github.ioUnknown
r3---sn-o097znsr.gvt1.comUnknown
r4---sn-n4v7sns7.gvt1.comUnknown
r3---sn-5ualdnze.gvt1.comUnknown
r3---sn-vgqskn67.gvt1.comUnknown
www.google.comUnknown
r1---sn-vgqsrnz6.gvt1.comUnknown
r3---sn-vgqskns7.gvt1.comUnknown
r5---sn-vgqskned.gvt1.comUnknown
r4---sn-p5qlsnrr.gvt1.comUnknown
r5---sn-vgqsknes.gvt1.comUnknown
r4---sn-a5msener.gvt1.comUnknown
r5---sn-a5meknzk.gvt1.comUnknown
r2---sn-vgqsrnzk.gvt1.comUnknown
r5---sn-vgqsknzk.gvt1.comUnknown
r5---sn-vgqskn6z.gvt1.comUnknown
r1---sn-p5qlsnrr.gvt1.comUnknown
r2---sn-vgqsrnzs.gvt1.comUnknown
r2---sn-vgqsknzd.gvt1.comUnknown
r2---sn-o097znsl.gvt1.comUnknown
r1---sn-n4v7snll.gvt1.comUnknown
maven.aliyun.comUnknown
archiva-maven-storage-prod.oss-cn-beijing.aliyuncs.comUnknown
r5---sn-p5qlsn7d.gvt1.comUnknown
r1---sn-p5qlsn7s.gvt1.comUnknown
r1---sn-o097znzr.gvt1.comUnknown
r1---sn-a5meknde.gvt1.comUnknown
r5---sn-n4v7sns7.gvt1.comUnknown
r5---sn-p5qlsn7l.gvt1.comUnknown
r4---sn-2imern76.gvt1.comUnknown
r4---sn-n4v7snse.gvt1.comUnknown
r2---sn-p5qlsn7d.gvt1.comUnknown
r2---sn-vgqsrn6e.gvt1.comUnknown
r4---sn-vgqsknze.gvt1.comUnknown
r1---sn-n4v7snse.gvt1.comUnknown
r2---sn-vgqsknld.gvt1.comUnknown
r5---sn-vgqsrn6l.gvt1.comUnknown
r1---sn-vgqsknzz.gvt1.comUnknown
r3---sn-vgqsknzd.gvt1.comUnknown
r4---sn-n4v7sney.gvt1.comUnknown
r5---sn-o097znsl.gvt1.comUnknown
r4---sn-o097znsr.gvt1.comUnknown
r1---sn-n4v7snls.gvt1.comUnknown
r3---sn-o097znsd.gvt1.comUnknown
r4---sn-n4v7snly.gvt1.comUnknown
r1---sn-p5qs7nsk.gvt1.comUnknown
r3---sn-p5qs7nzk.gvt1.comUnknown
r3---sn-2imeyn7k.gvt1.comUnknown
r5---sn-2imern76.gvt1.comUnknown
r4---sn-vgqskn67.gvt1.comUnknown
r2---sn-vgqsrns6.gvt1.comUnknown
r2---sn-p5qs7nzk.gvt1.comUnknown
r2---sn-o097znze.gvt1.comUnknown
r5---sn-n4v7sney.gvt1.comUnknown
r4---sn-p5qs7nzk.gvt1.comUnknown
r5---sn-vgqsknlz.gvt1.comUnknown
r2---sn-vgqsrn6l.gvt1.comUnknown
r5---sn-p5qlsny6.gvt1.comUnknown
r1---sn-p5qs7nzk.gvt1.comUnknown
r4---sn-vgqsrn6l.gvt1.comUnknown
r2---sn-vgqskn6z.gvt1.comUnknown
r4---sn-p5qddn7z.gvt1.comUnknown
r2---sn-p5qs7nsr.gvt1.comUnknown
r3---sn-p5qlsnrl.gvt1.comUnknown
r5---sn-p5qs7nsr.gvt1.comUnknown
r1---sn-vgqsrned.gvt1.comUnknown
docs.gradle.orgGradleGradle
docs.groovy-lang.orgUnknown
release-assets.githubusercontent.comGitHubGitHub
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
mirrors.cloud.tencent.comUnknown
us-v20.events.data.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
unitedstates.cp.wd.microsoft.comMicrosoftMicrosoft
cli.codecov.ioCodecovCodecov
keybase.ioUnknown
ingest.codecov.ioCodecovCodecov
o26192.ingest.us.sentry.ioUnknown
ihub-pub.testspace.comUnknown