StepSecurity Logo
StepSecurity
LoginStart free
robinraju/release-downloader

robinraju/release-downloader

Github action to download release assets from private or public repositories

GitHubGitHub Repository

232 stars

Node.js

Node Action

Maintained action available

Score updated 2 days ago

GitHub Actions security score

robinraju/release-downloader

Score

6/10

License

MIT License

Maintained

30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

5 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 1760 open-source projects

Security Policy

security policy file not detected

Networking Behavior of robinraju/release-downloader

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
api.github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
release-assets.githubusercontent.comGitHubGitHub
swscan.apple.comUnknown
ipcdn.apple.comUnknown
ocsp2.apple.comUnknown
mesu.apple.comUnknown
device-config.pcms.apple.comUnknown
calendars.icloud.comUnknown
api.apple-cloudkit.comUnknown
updates.cdn-apple.comUnknown
configuration.apple.comUnknown
ocsp.digicert.comUnknown
pancake.apple.comUnknown
xp.apple.comUnknown
bag.itunes.apple.comUnknown
metrics.icloud.comUnknown
mask-api.icloud.comUnknown
swdist.apple.comUnknown