pypa/cibuildwheel
🎡 Build Python wheels for all the platforms with minimal configuration.
Composite Action Details
Pinnable | Yes |
GitHub Actions security score
| pypa/cibuildwheel | |
|---|---|
Score | 7/10 |
Pinnable | Yes |
License | BSD 2-Clause "Simplified" License |
Maintained | 30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10 |
Vulnerabilities | 0 existing vulnerabilities detected |
Branch protection | branch protection is not maximal on development and all release branches |
AI analysis | 3 Security findings |
Manual code review | - |
Secure publishing | - |
Signed commits | - |
Automated security tools | - |
Popular | Used by 6624 open-source projects |
Security Policy | security policy file not detected |
Networking Behavior of pypa/cibuildwheel
This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.
Popular DestinationUnknown Destination
| Network Destination | Owner |
|---|---|
| pypi.org | |
| files.pythonhosted.org | |
| quay.io | Unknown |
| cdn03.quay.io | Unknown |
| github.com |  GitHub |
| cdn01.quay.io | Unknown |
| api.github.com | GitHub |
| objects.githubusercontent.com | GitHub |
| micro.mamba.pm | Unknown |
| conda.anaconda.org | Unknown |
| raw.githubusercontent.com | GitHub |
| downloads.python.org | Unknown |
| release-assets.githubusercontent.com | GitHub |
| mirrors.almalinux.org | Unknown |
| azure.repo.almalinux.org | Unknown |
| nc-mirror.iwebfusion.net | Unknown |
| mirrors.fedoraproject.org | Unknown |
| linux-mirrors.fnal.gov | Unknown |
| southfront.mm.fcix.net | Unknown |
| mirror.fmt-2.serverforge.org | Unknown |
| ziply.mm.fcix.net | Unknown |
| pubmirror1.math.uh.edu | Unknown |
| mirror.dal.nexril.net | Unknown |
| ohioix.mm.fcix.net | Unknown |
| ftp-chi.osuosl.org | Unknown |
| ftp-osl.osuosl.org | Unknown |
| nnenix.mm.fcix.net | Unknown |
| mirrors.wcupa.edu | Unknown |
| atl.mirrors.knownhost.com | Unknown |
| d2lzkl7pfhq30w.cloudfront.net | Unknown |
| mirror.its.umich.edu | Unknown |
| mirror.us.leaseweb.net | Unknown |
| mirrors.sonic.net | Unknown |
| mirror.lstn.net | Unknown |
| insect.mm.fcix.net | Unknown |
| mirror.math.princeton.edu | Unknown |
| mirror.sfo12.us.leaseweb.net | Unknown |
| na.edge.kernel.org | Unknown |
| ix-denver.mm.fcix.net | Unknown |
| repo.ialab.dsu.edu | Unknown |
| mirror.nodesdirect.com | Unknown |
| ryamer.mm.fcix.net | Unknown |
| mirrors.iu13.net | Unknown |
| coresite-atl.mm.fcix.net | Unknown |
| mirror.grid.uchicago.edu | Unknown |
| volico.mm.fcix.net | Unknown |
| solidrock.mm.fcix.net | Unknown |
| mirror.us.mirhosting.net | Unknown |
| mirrors.rc.rit.edu | Unknown |
| mirror-mci.yuki.net.uk | Unknown |
| mirrors.xmission.com | Unknown |
| dfw.mirror.rackspace.com | Unknown |
| nocix.mm.fcix.net | Unknown |
| opencolo.mm.fcix.net | Unknown |
| ftp-nyc.osuosl.org | Unknown |
| mirror.mci-1.serverforge.org | Unknown |
| mirror.alma.iad1.serverforge.org | Unknown |
| mirrors.lug.mtu.edu | Unknown |
| mirror.servaxnet.com | Unknown |
| mirrors.gigenet.com | Unknown |
| mirror.facebook.net | Unknown |
| mirror.az31.cloudpropeller.com | Unknown |
| mirror.fcix.net | Unknown |
| mirror.umd.edu | Unknown |
| almalinux.mirror.beocat.ksu.edu | Unknown |
| gigsouth.mm.fcix.net | Unknown |
| pubmirror3.math.uh.edu | Unknown |
| linux.mirrors.es.net | Unknown |
| mirror.rnet.missouri.edu | Unknown |
| epel.mirror.constant.com | Unknown |
| epel.mirror.shastacoe.net | Unknown |
| md-j5zq4rk3m3pt.z15.blob.storage.azure.net | Unknown |
| mirror.cs.princeton.edu | Unknown |
| gcp.repo.almalinux.org | Unknown |
| mirrors.mit.edu | Unknown |
| md-ffx532fv1drq.z35.blob.storage.azure.net | Unknown |
| paducahix.mm.fcix.net | Unknown |
| cofractal-sea.mm.fcix.net | Unknown |
| mirrors.vcea.wsu.edu | Unknown |
| veronanetworks.mm.fcix.net | Unknown |
| lesnet.mm.fcix.net | Unknown |
| mirrors.20i.com | Unknown |
| fedora-mirror-mia.gigsouth.com | Unknown |
| fedora-mirror-atl.gigsouth.com | Unknown |
| static.rust-lang.org | Unknown |
| index.crates.io | Unknown |
| static.crates.io | Unknown |
| forksystems.mm.fcix.net | Unknown |
| ord.mirror.rackspace.com | Unknown |
| almamirror.phoenixnap.com | Unknown |
| mirrors.egr.msu.edu | Unknown |
| msp.aws.repo.almalinux.org | Unknown |
| mirrors.ocf.berkeley.edu | Unknown |
| phx.mirrors.clouvider.net | Unknown |
| mirrors.xtom.com | Unknown |
| plug-mirror.rcac.purdue.edu | Unknown |
| den.aws.repo.almalinux.org | Unknown |
| bos.aws.repo.almalinux.org | Unknown |
| ipcdn.apple.com | Unknown |
| cds.apple.com | Unknown |
| help.apple.com | Unknown |
| 0.pool.ntp.org | Unknown |
| dns.google | Unknown |
| gspe1-ssl.ls.apple.com | Unknown |
| _dns.resolver.arpa | Unknown |
| init-kt.apple.com | Unknown |
| mask-api.icloud.com | Unknown |
| gateway.icloud.com | Unknown |
| news-edge.apple.com | Unknown |
| weatherkit.apple.com | Unknown |
| fbs.smoot.apple.com | Unknown |
| configuration.ls.apple.com | Unknown |
| swallow.apple.com | Unknown |
| ocsp2.apple.com | Unknown |
| iad.mirror.rackspace.com | Unknown |
| mesu.apple.com | Unknown |
| configuration.apple.com | Unknown |
| pancake.apple.com | Unknown |
| gdmf.apple.com | Unknown |
| configuration.apple.com.akadns.net | Unknown |
| apps.mzstatic.com | Unknown |
| experiments.apple.com | Unknown |
| init.itunes.apple.com | Unknown |
| fpinit.itunes.apple.com | Unknown |
| sf-api-token-service.itunes.apple.com | Unknown |
| assets-mercury.mzstatic.com | Unknown |
| mesu-cdn.origin-apple.com.akadns.net | Unknown |
| swscan.apple.com | Unknown |
| xp.apple.com | Unknown |
| valid.apple.com | Unknown |
| swdist.apple.com | Unknown |
| metrics.icloud.com | Unknown |
| ocsp.digicert.com | Unknown |
| gdmf-ados.apple.com | Unknown |
| gsa.apple.com | Unknown |
| ipcdn-lb.apple.com.akadns.net | Unknown |
| s.mzstatic.com | Unknown |
| amp-api.media.apple.com | Unknown |
| c.apple.news | Unknown |
| updates.cdn-apple.com | Unknown |
| api.smoot.apple.com | Unknown |
| ocsp.comodoca.com | Unknown |
| api2.smoot.apple.com | Unknown |
| gateway-oblivious.apple.com | Unknown |
| ocsp.usertrust.com | Unknown |
| weather-edge.apple.com | Unknown |
| updates.g.aaplimg.com | Unknown |
| bag.itunes.apple.com | Unknown |
| xp.itunes-apple.com.akadns.net | Unknown |
| swdist.apple.com.akadns.net | Unknown |
| device-config.pcms.apple.com | Unknown |
| humb.apple.com | Unknown |
| apple-relay.cloudflare.com | Unknown |
| api.apple-cloudkit.com | Unknown |
| telemetry.visualstudio.microsoft.com | |
| mobile.events.data.microsoft.com | |
| dist.nuget.org | Unknown |
| api.nuget.org | Unknown |
| dc.services.visualstudio.com | Unknown |
| mirror.team-cymru.com | Unknown |
| xp-cdn-lb.itunes-apple.com.akadns.net | Unknown |
| is4-ssl.mzstatic.com | Unknown |
| is3-ssl.mzstatic.com | Unknown |
| images-mercury.mzstatic.com | Unknown |
| updates-http.cdn-apple.com | Unknown |
| configuration-row-lb.apple.com.akadns.net | Unknown |
| is2-ssl.mzstatic.com | Unknown |
| is5-ssl.mzstatic.com | Unknown |
| is1-ssl.mzstatic.com | Unknown |
| hcc-mirror.unl.edu | Unknown |
| ash.mirrors.clouvider.net | Unknown |
| mirror.steadfastnet.com | Unknown |
| ocsp2.g.aaplimg.com | Unknown |
| ab.apple.com.akadns.net | Unknown |
| mask.icloud.com | Unknown |
| configuration-lb.ls-apple.com.akadns.net | Unknown |
| help.origin-apple.com.akadns.net | Unknown |
| mirror.yuki.net.uk | Unknown |
| swdist.g.aaplimg.com | Unknown |
| cdn.smoot.apple.com | Unknown |
| apps-mzstatic-cdn.itunes-apple.com.akadns.net | Unknown |
| pit.mirror.jurassicinnovations.com | Unknown |
| dns.msftncsi.com | Unknown |
| settings-win.data.microsoft.com | |
| login.live.com | Unknown |
| fs.microsoft.com | |
| incoming.telemetry.mozilla.org | Unknown |
| telemetry-incoming.r53-2.services.mozilla.com | Unknown |
| calendars.icloud.com | Unknown |
| gsp-ssl.ls.apple.com | Unknown |
| unlinkability.apple.com | Unknown |
| dap.pat-issuer.cloudflare.com | Unknown |
| tas02.sls.update.microsoft.com | |
| www.microsoft.com | |
| fe2cr.update.microsoft.com | |
| download.windowsupdate.com | Unknown |
| geo.prod.do.dsp.mp.microsoft.com | |
| kv601.prod.do.dsp.mp.microsoft.com | |
| cp601.prod.do.dsp.mp.microsoft.com | |
| au.download.windowsupdate.com | Unknown |
| ocsp2.globalsign.com | Unknown |
| ecs.office.com | Unknown |
| geover.prod.do.dsp.mp.microsoft.com | |
| dl.delivery.mp.microsoft.com | |
| packages.microsoft.com | |
| ocsp.sectigo.com | Unknown |
| go.microsoft.com | |
| definitionupdates.microsoft.com | |
| download.microsoft.com | |
| oneocsp.microsoft.com | |
| x1.c.lencr.org | Unknown |
| e7.c.lencr.org | Unknown |
| r12.c.lencr.org | Unknown |
| e8.c.lencr.org | Unknown |
| www.python.org | Unknown |
| client.wns.windows.com | Unknown |
| kv801.prod.do.dsp.mp.microsoft.com | |
| cp801.prod.do.dsp.mp.microsoft.com | |
| kv501.prod.do.dsp.mp.microsoft.com | |
| cp501.prod.do.dsp.mp.microsoft.com | |
| adl.windows.com | Unknown |
| ocsp.globalsign.com | Unknown |
| gateway.fe2.apple-dns.net | Unknown |
| stocks-edge.apple.com | Unknown |
| tas01.cwsapp.update.microsoft.com | |
| tlu.dl.delivery.mp.microsoft.com | |
| api.apple-cloudkit.fe2.apple-dns.net | Unknown |
| cdn-h3.g.aaplimg.com | Unknown |
| h3.apis.apple.map.fastly.net | Unknown |
| cds-cdn.v.aaplimg.com | Unknown |
| help.v.aaplimg.com | Unknown |
| cf.iadsdk.apple.com | Unknown |
| lcdn-locator.apple.com | Unknown |
| gspe35-ssl.ls.apple.com | Unknown |
| iadsdk.apple.com | Unknown |
| get-bx.g.aaplimg.com | Unknown |
| cdn-icloud-content.g.aaplimg.com | Unknown |
| mesu-cdn.apple.com.akadns.net | Unknown |
| gsa.idms-apple.com.akadns.net | Unknown |
| swscan-cdn.apple.com.akadns.net | Unknown |
| arc.msn.com | Unknown |
| fd.api.iris.microsoft.com | |
| archives.boost.io | Unknown |
| ocsp.edge.digicert.com | Unknown |
| dualstack.python.map.fastly.net | Unknown |
| xp.v.aaplimg.com | Unknown |
| setup.icloud.com | Unknown |
| 1d.tlu.dl.delivery.mp.microsoft.com | |
| gdmf.v.aaplimg.com | Unknown |
| time.windows.com | Unknown |
| mask-api.fe2.apple-dns.net | Unknown |
| eip-terr-na.cdp1.digicert.com.akahost.net | Unknown |
| publicassets.cdn-apple.com | Unknown |
| configuration.apple.com.edgekey.net | Unknown |
| stocks-data-service.apple.com | Unknown |
| mirror.01link.hk | Unknown |
| developer.download.nvidia.com | Unknown |
| wns2-by3p.wns.windows.com | Unknown |
| community.chocolatey.org | Unknown |
| packages.chocolatey.org | Unknown |
| formulae.brew.sh | Unknown |
| ghcr.io | GitHub |
| pkg-containers.githubusercontent.com | GitHub |
| fastly-static.crates.io | Unknown |
| codecs.fedoraproject.org | Unknown |
| api.anaconda.org | Unknown |
| binstar-cio-packages-prod.s3.amazonaws.com | Unknown |
| mirror.linux.duke.edu | Unknown |
| slscr.update.microsoft.com | |
| fe3cr.delivery.mp.microsoft.com | |
| tsfe.trafficshaping.dsp.mp.microsoft.com | |
| 1a.au.download.windowsupdate.com | Unknown |
| mirror.cogentco.com | Unknown |
| ftp.ucsb.edu | Unknown |
| mirror.nodespace.com | Unknown |
| us.mirrors.cicku.me | Unknown |
| mirror.wdc2.us.leaseweb.net | Unknown |
| ocsp.rootca1.amazontrust.com | Unknown |
| ocsp.r2m04.amazontrust.com | Unknown |
| displaycatalog.mp.microsoft.com | |
| tas02.cws.update.microsoft.com | |
| mirror.alma.lax1.serverforge.org | Unknown |
| mirror.us-midwest-1.nexcess.net | Unknown |
| cofractal-ewr.mm.fcix.net | Unknown |
| weatherkit.apple.com.akadns.net | Unknown |
| mirror.linux.ncsu.edu | Unknown |
| certs.apple.com | Unknown |
| mirror.wiseglobalsolutions.com | Unknown |
| mirror.pit.teraswitch.com | Unknown |
| e3528.dscg.akamaiedge.net | Unknown |
| apple-relay.fastly-edge.com | Unknown |
| x2.c.lencr.org | Unknown |
| ye.c.lencr.org | Unknown |
| ye2.c.lencr.org | Unknown |
| chi.almalinux.osuosl.org | Unknown |
| mirror.shomepower.com | Unknown |
| azkms.core.windows.net | Unknown |
| mirror.tzulo.com | Unknown |
| lolhost.mm.fcix.net | Unknown |
| crl3.digicert.com | Unknown |
| tx-mirror.tier.net | Unknown |
| v1.ta2.fe2cr.update.microsoft.com | |
| yr2.c.lencr.org | Unknown |
| configuration.g.aaplimg.com | Unknown |
| c.apple.news.edgekey.net | Unknown |
| xp.g.aaplimg.com | Unknown |
| ye1.c.lencr.org | Unknown |
| e5977.dsce9.akamaiedge.net | Unknown |
| nyc.almalinux.osuosl.org | Unknown |
| ipcdn.g.aaplimg.com | Unknown |
| mirrors.rit.edu | Unknown |
| nullroute.mm.fcix.net | Unknown |
| al-mirror.a2hosting.com | Unknown |
| mirror.usi.edu | Unknown |
| cdn.icloud-content.com | Unknown |
| or-mirror.iwebfusion.net | Unknown |
| dal.mirrors.clouvider.net | Unknown |
| almalinux.mirror.shastacoe.net | Unknown |
| mirrors.cat.pdx.edu | Unknown |
| gspx-ssl.ls.apple.com | Unknown |
| mirrors.oblivion.online | Unknown |
| seattle.crazyfast.us | Unknown |
| mirror.gozunga.com | Unknown |
| mirror.cloudpropeller.com | Unknown |
| certs.g.aaplimg.com | Unknown |
| prod.ingestion-edge.prod.dataops.mozgcp.net | Unknown |
| prod.ingestion-edge.prod.dataservices.mozgcp.net | Unknown |
| ohttp-relay1.fastly-edge.com | Unknown |
| ipcdn-web.apple.com | Unknown |
| itunes.apple.com | Unknown |
| token.safebrowsing.apple | Unknown |
| proxy.safebrowsing.apple | Unknown |
| gspe21-ssl.ls.apple.com | Unknown |
| websitereview.corp.apple.com | Unknown |
| mask-h2.icloud.com | Unknown |
| mirror.vtti.vt.edu | Unknown |
| mirror.interserver.net | Unknown |
| yr1.c.lencr.org | Unknown |
| mirror.0x626b.com | Unknown |
| metricsedge-continent-wrr.v.aaplimg.com | Unknown |
| gsp57-ssl-background.ls.apple.com | Unknown |
| pubmirror2.math.uh.edu | Unknown |
| ocsp2.apple.com.edgekey.net | Unknown |
| fdix-ind.mm.fcix.net | Unknown |
| tas02.cwsmu.update.microsoft.com | |
| sas.pcms.apple.com | Unknown |
| bag-cdn.itunes-apple.com.akadns.net | Unknown |
| fpinit-us-e.edge-itunes-apple.com.akadns.net | Unknown |
| fpinit-us-w.edge-itunes-apple.com.akadns.net | Unknown |
| fpinit.edge-itunes-apple.com.akadns.net | Unknown |
| api-spotlight.smoot.apple.com | Unknown |
| bag-cdn-lb.itunes-apple.com.akadns.net | Unknown |
| cdp1.digicert.com.akamaized.net | Unknown |
| cp10.cloudflare.com | Unknown |
| swallow-apple-com.v.aaplimg.com | Unknown |
| lcdn-locator.apple.com.akadns.net | Unknown |
| md-r0qvjb0bnjzc.z29.blob.storage.azure.net | Unknown |
| mesu.apple.com.edgekey.net | Unknown |
| cfhcable.mm.fcix.net | Unknown |
| codingflyboy.mm.fcix.net | Unknown |