StepSecurity Logo
StepSecurity
LoginStart free
pnpm/action-setup

pnpm/action-setup

Install pnpm package manager

GitHubGitHub Repository

1220 stars

Node.js

Node Action

Maintained action available

Score updated 3 days ago

GitHub Actions security score

pnpm/action-setup

Score

6/10

License

MIT License

Maintained

10 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

16 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 3248 open-source projects

Security Policy

security policy file not detected

Networking Behavior of pnpm/action-setup

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
registry.npmjs.orgnpm Registrynpm Registry
node.pkg.stUnknown
npm.pkg.stUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
api.github.comGitHubGitHub
nodejs.orgUnknown
release-assets.githubusercontent.comGitHubGitHub
x.cp.wd.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
binaries.prisma.shUnknown
checkpoint.prisma.ioUnknown
index.chromatic.comUnknown
storybook.js.orgUnknown
chromatic-builds.s3.us-west-2.amazonaws.comUnknown
telemetry.vercel.comUnknown
turbo-remote-cache.apps.01.cf.eu01.stackit.cloudUnknown
dns.msftncsi.comUnknown
gdmf.apple.comUnknown
xp.apple.comUnknown
ocsp2.apple.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
incoming.telemetry.mozilla.orgUnknown
ocsp.digicert.comUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
pancake.apple.comUnknown
fs.microsoft.comMicrosoftMicrosoft
notify.chromatic.comUnknown
sf-api-token-service.itunes.apple.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
fe2cr.update.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
au.download.windowsupdate.comUnknown
0.pool.ntp.orgUnknown
ocsp.comodoca.com.cdn.cloudflare.netUnknown
mask-api.icloud.comUnknown
updates.cdn-apple.comUnknown
configuration.apple.comUnknown
calendars.icloud.comUnknown
bag.itunes.apple.comUnknown
api.apple-cloudkit.comUnknown
metrics.icloud.comUnknown
experiments.apple.comUnknown
apps.mzstatic.comUnknown
client.wns.windows.comUnknown
configuration.ls.apple.comUnknown
swallow.apple.comUnknown
cds.apple.comUnknown
news-edge.apple.comUnknown
ocsp.sectigo.comUnknown
s.mzstatic.comUnknown
device-config.pcms.apple.comUnknown
fpinit.itunes.apple.comUnknown
swscan.apple.comUnknown
apple-relay.cloudflare.comUnknown
apple-relay.fastly-edge.comUnknown
mesu.apple.comUnknown
ipcdn.apple.comUnknown
xp.v.aaplimg.comUnknown
gateway.icloud.comUnknown