oxsecurity/megalinter/flavors/cupcake

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

GitHub Repository

2585 stars

Docker Action

Maintained action available

Score updated 5 days ago

GitHub Actions security score

	oxsecurity/megalinter/flavors/cupcake
Score	6/10
Pinnable	Yes
License	GNU Affero General Public License v3.0
Maintained	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Vulnerabilities	83 existing vulnerabilities detected
Docker vulnerabilities	docker://ghcr.io/oxsecurity/megalinter-cupcake:v9 (15 existing vulnerabilities detected)
Branch protection	Branch protection is maximal on development and all release branches
AI analysis	6 Security findings
Manual code review	-
Secure publishing	-
Signed commits	-
Automated security tools	-
Popular	Used by 96 open-source projects
Security Policy	security policy file detected

Networking Behavior of oxsecurity/megalinter/flavors/cupcake

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination

Network Destination	Owner
raw.githubusercontent.com	GitHub
www.schemastore.org	Unknown
github.com	GitHub
api.github.com	GitHub
json.schemastore.org	Unknown
toolbox-data.anchore.io	Unknown
grype.anchore.io	Unknown
pypi.org	Python Registry
api0.prismacloud.io	Unknown
kics.io	Unknown
mirror.gcr.io	Unknown
aka.ms	Unknown
docs.github.com	GitHub
codeql.github.com	GitHub
eslint.org	Unknown
crontab.guru	Unknown
google.github.io	Unknown
fitfileviewer.typpi.online	Unknown
go.microsoft.com	Microsoft
code.visualstudio.com	Unknown
prettier.io	Unknown
nick2bad4u.github.io	Unknown
img.shields.io	Unknown
www.electronjs.org	Unknown
jquery.com	Unknown
nodejs.org	Unknown
jquery.org	Unknown
leafletjs.com	Unknown
views.igorkowalczyk.dev	Unknown
developer.garmin.com	Unknown
pages.github.com	GitHub
www.harryonline.net	Unknown
www.chartjs.org	Unknown
www.electron.build	Unknown
www.fitfileviewer.com	Unknown
vega.github.io	Unknown
zwiftmap.com	Unknown
repobeats.axiom.co	Unknown
registry.npmjs.org	npm Registry
opencollective.com	Unknown
tidelift.com	Unknown
www.sonarsource.com	Unknown
feross.org	Unknown
dotenvx.com	Unknown
www.patreon.com	Unknown
file.io	Unknown
www.file.io	Unknown
schemastore.org	Unknown
flathub.org	Unknown
dl.flathub.org	Unknown
www.contributor-covenant.org	Unknown
nvd.nist.gov	NIST
typing.python.org	Unknown
mypy.readthedocs.io	Unknown
test.pypi.org	Python Registry
megalinter.io	Unknown
unmaintained.tech	Unknown
codspeed.io	Unknown
docs.astral.sh	Unknown
results.pre-commit.ci	Unknown
snyk.io	Unknown
blog.jaraco.com	Unknown
www.mypy-lang.org	Unknown
codecov.io	Codecov
docs.codspeed.io	Unknown
containers.dev	Unknown
doi.org	Unknown
readthedocs.org	Unknown
www.bestpractices.dev	Unknown
zenodo.org	Unknown
static.pepy.tech	Unknown
scorecard.dev	Unknown
www.slingacademy.com	Unknown
api.scorecard.dev	Unknown
www.sphinx-doc.org	Unknown
pepy.tech	Unknown
app.codecov.io	Codecov
app.readthedocs.org	Unknown
gitlab.com	GitLab
docs.pytest.org	Unknown
python-poetry.org	Unknown
pre-commit.com	Unknown
docs.readthedocs.com	Unknown
sphinxcontrib-napoleon.readthedocs.io	Unknown
docs.readthedocs.io	Unknown
unofficial-tabdeal-api.readthedocs.io	Unknown
nox.thea.codes	Unknown
sonarcloud.io	Sonar
ghcr.io	GitHub
pkg-containers.githubusercontent.com	GitHub
www.weather.gov	Unknown
merrysky.net	Unknown
openfreemap.org	Unknown
www.partlycloudy.org	Unknown
svelte.dev	Unknown
docs.renovatebot.com	Unknown
check.trivy.dev	Unknown
paulmillr.com	Unknown
json-schema.org	Unknown
files.pythonhosted.org	Python Registry