StepSecurity Logo
StepSecurity
LoginStart free
jdx/mise-action

jdx/mise-action

GitHubGitHub Repository

266 stars

Node.js

Node Action

Maintained action available

Score updated 4 days ago

GitHub Actions security score

jdx/mise-action

Score

6/10

License

MIT License

Maintained

30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

5 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 1992 open-source projects

Security Policy

security policy file not detected

Networking Behavior of jdx/mise-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
mise.jdx.devUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
mise-versions.jdx.devUnknown
api.github.comGitHubGitHub
pypi.orgPython RegistryPython Registry
registry.npmjs.orgnpm Registrynpm Registry
nodejs.orgUnknown
files.pythonhosted.orgPython RegistryPython Registry
index.crates.ioUnknown
static.crates.ioUnknown
static.rust-lang.orgUnknown
release-assets.githubusercontent.comGitHubGitHub
global.endpoint.security.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
fedoraproject.orgUnknown
galaxy.ansible.comUnknown
ansible-galaxy-ng.s3.dualstack.us-east-1.amazonaws.comUnknown
proxy.golang.orgGolang ProxyGolang Proxy
sum.golang.orgUnknown
storage.googleapis.comGoogleGoogle
tuf-repo-cdn.sigstore.devSigstoreSigstore
dl.google.comGoogleGoogle
dl.k8s.ioUnknown
cdn.dl.k8s.ioUnknown
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
get.helm.shUnknown
sigs.k8s.ioUnknown
ftp.gnu.orgUnknown
mise-tools.jdx.devUnknown
crates.ioUnknown
dl.deno.landUnknown
mise-java.jdx.devUnknown
download.java.netUnknown
awscli.amazonaws.comUnknown
releases.hashicorp.comHashiCorpHashiCorp
client.wns.windows.comUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
swscan.apple.comUnknown
xp.apple.comUnknown
gdmf.apple.comUnknown
mesu.apple.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
c.pki.googUnknown
ocsp.comodoca.comUnknown
ocsp.usertrust.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
www.python.orgUnknown
api.apple-cloudkit.comUnknown
ocsp2.apple.comUnknown
dns.msftncsi.comUnknown
x1.c.lencr.orgUnknown
r12.c.lencr.orgUnknown
incoming.telemetry.mozilla.orgUnknown
ocsp.digicert.comUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
login.live.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
au.download.windowsupdate.comUnknown
mask-api.icloud.comUnknown
fbs.smoot.apple.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
updates.cdn-apple.comUnknown
configuration.apple.comUnknown
bag.itunes.apple.comUnknown
pancake.apple.comUnknown
xp.itunes-apple.com.akadns.netUnknown
metrics.icloud.comUnknown
configuration.apple.com.akadns.netUnknown
ipcdn.apple.comUnknown
cds.apple.comUnknown
help.apple.comUnknown
apps.mzstatic.comUnknown
experiments.apple.comUnknown
init.itunes.apple.comUnknown
golang.orgUnknown
go.googlesource.comUnknown