StepSecurity Logo
LoginStart free
hashicorp/setup-terraform

hashicorp/setup-terraform

Sets up Terraform CLI in your GitHub Actions workflow.

GitHubGitHub Repository

1467 stars

Node.js

Node Action

Updated 5 days ago

GitHub Actions security score

hashicorp/setup-terraform

Score

9/10

License

Mozilla Public License 2.0

Maintained

14 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

0 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 2884 open-source projects

Security Policy

security policy file detected

Networking Behavior of hashicorp/setup-terraform

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
releases.hashicorp.comHashiCorpHashiCorp
pypi.orgPython RegistryPython Registry
files.pythonhosted.orgPython RegistryPython Registry
cdn.fwupd.orgUnknown
sum.golang.orgUnknown
hosted-compute-watchdog-prod-eus-01.githubapp.comUnknown
hosted-compute-watchdog-prod-iad-02.githubapp.comUnknown
gcr.ioUnknown
storage.googleapis.comGoogleGoogle
checkpoint-api.hashicorp.comUnknown
ip-ranges.amazonaws.comUnknown
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
repo.maven.apache.orgUnknown
registry.terraform.ioUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
stun3.l.google.comUnknown
stun4.l.google.comUnknown
stun2.l.google.comUnknown
stun.l.google.comUnknown
stun1.l.google.comUnknown
registry-1.docker.ioDockerHubDockerHub
hosted-compute-watchdog-prod-eus-02.githubapp.comUnknown
hosted-compute-watchdog-prod-iad-01.githubapp.comUnknown