StepSecurity Logo
StepSecurity
LoginStart free
hashicorp/vault-action

hashicorp/vault-action

A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.

GitHubGitHub Repository

497 stars

Node.js

Node Action

Score updated 1 day ago

GitHub Actions security score

hashicorp/vault-action

Score

7/10

License

MIT License

Maintained

2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1

Vulnerabilities

4 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 1104 open-source projects

Security Policy

security policy file detected

Networking Behavior of hashicorp/vault-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
vault.platform.muehlbachler.ioUnknown
vault.bestsellerit.comUnknown