StepSecurity Logo
StepSecurity
LoginStart free
shivammathur/setup-php

shivammathur/setup-php

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

GitHubGitHub Repository

3240 stars

Node.js

Node Action

Maintained action available

Score updated 2 days ago

GitHub Actions security score

shivammathur/setup-php

Score

10/10

License

MIT License

Maintained

30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

0 existing vulnerabilities detected

Branch protection

Branch protection is maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 10304 open-source projects

Security Policy

security policy file detected

Networking Behavior of shivammathur/setup-php

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
raw.githubusercontent.comGitHubGitHub
raw.github.comGitHubGitHub
azure.archive.ubuntu.comUbuntuUbuntu
dl.cloudsmith.ioUnknown
getcomposer.orgUnknown
archive.ubuntu.comUbuntuUbuntu
packages.microsoft.comMicrosoftMicrosoft
ppa.launchpadcontent.netUnknown
esm.ubuntu.comUbuntuUbuntu
security.ubuntu.comUbuntuUbuntu
api.launchpad.netUnknown
keyserver.ubuntu.comUbuntuUbuntu
pgp.mit.eduUnknown
keys.openpgp.orgUnknown
ppa.launchpad.netUnknown
pecl.php.netUnknown
packagist.orgUnknown
pear.php.netUnknown
download.oracle.comUnknown
cdn.jsdelivr.netUnknown
setup-php.comUnknown
repo.packagist.orgUnknown
phar.phpunit.deUnknown
api.github.comGitHubGitHub
release-assets.githubusercontent.comGitHubGitHub
x.cp.wd.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
registry.npmjs.orgnpm Registrynpm Registry
artifacts.setup-php.comUnknown
artifacts.php-ubuntu.setup-php.comUnknown
ppa.setup-php.comUnknown
curl.haxx.seUnknown
curl.seUnknown
xdebug.orgUnknown
downloads.php.netUnknown
dns.msftncsi.comUnknown
ocsp.sectigo.comUnknown
ghcr.ioGitHubGitHub
pkg-containers.githubusercontent.comGitHubGitHub
doc.php.netUnknown
ocsp2.apple.comUnknown
gdmf.apple.comUnknown
updates.cdn-apple.comUnknown
pancake.apple.comUnknown
valid.apple.comUnknown
configuration.apple.comUnknown
cds.apple.comUnknown
help.apple.comUnknown
ocsp2.g.aaplimg.comUnknown
configuration.ls.apple.comUnknown
mesu.apple.comUnknown
init.itunes.apple.comUnknown
0.pool.ntp.orgUnknown
news-edge.apple.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
incoming.telemetry.mozilla.orgUnknown
ocsp.digicert.comUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
swallow.apple.comUnknown
swscan.apple.comUnknown
bag.itunes.apple.comUnknown
fbs.smoot.apple.comUnknown
mask-api.icloud.comUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
configuration-row-lb.apple.com.akadns.netUnknown
swdist.g.aaplimg.comUnknown
experiments.apple.comUnknown
apps.mzstatic.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
xp.apple.comUnknown
swdist.apple.comUnknown
calendars.icloud.comUnknown
device-config.pcms.apple.comUnknown
mesu-cdn.apple.com.akadns.netUnknown
configuration.apple.com.akadns.netUnknown
dc.services.visualstudio.comUnknown
login.live.comUnknown
wns2-by3p.wns.windows.comUnknown
oneocsp.microsoft.comMicrosoftMicrosoft
client.wns.windows.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
metrics.icloud.comUnknown
gateway.icloud.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
au.download.windowsupdate.comUnknown
adl.windows.comUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
dl.delivery.mp.microsoft.comMicrosoftMicrosoft
1d.tlu.dl.delivery.mp.microsoft.comMicrosoftMicrosoft
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
time.windows.comUnknown
wns2-bn3p.wns.windows.comUnknown
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
azkms.core.windows.netUnknown
tas02.cws.update.microsoft.comMicrosoftMicrosoft
e3528.dscg.akamaiedge.netUnknown
v1.ta2.fe2cr.update.microsoft.comMicrosoftMicrosoft
wns2-ch1p.wns.windows.comUnknown
www.powershellgallery.comUnknown
cdn.powershellgallery.comUnknown
ecs.office.comUnknown
ipcdn.apple.comUnknown
ocsp.edge.digicert.comUnknown
displaycatalog.mp.microsoft.comMicrosoftMicrosoft
tas01.cwsapp.update.microsoft.comMicrosoftMicrosoft
geover.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
fs.microsoft.comMicrosoftMicrosoft
arc.msn.comUnknown
fd.api.iris.microsoft.comMicrosoftMicrosoft
ocsp.comodoca.comUnknown
crl.sectigo.comUnknown
api.apple-cloudkit.comUnknown
setup.icloud.comUnknown
fe3cr.delivery.mp.microsoft.comMicrosoftMicrosoft
mozilla.map.fastly.netUnknown
detectportal.firefox.comUnknown
is4-ssl.mzstatic.comUnknown
is3-ssl.mzstatic.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
assets-mercury.mzstatic.comUnknown
images-mercury.mzstatic.comUnknown
is2-ssl.mzstatic.comUnknown
amp-api.media.apple.comUnknown
is5-ssl.mzstatic.comUnknown
updates-http.cdn-apple.comUnknown
mask.icloud.comUnknown
humb.apple.comUnknown
gdmf-ados.apple.comUnknown
ipcdn-web.apple.comUnknown
itunes.apple.comUnknown
configuration.g.aaplimg.comUnknown
publicassets.cdn-apple.comUnknown
_http._tcp.mirrors.ubuntu.comUbuntuUbuntu
mirrors.ubuntu.comUbuntuUbuntu
_http._tcp.security.ubuntu.comUbuntuUbuntu
contracts.canonical.comUnknown
_https._tcp.packages.microsoft.comMicrosoftMicrosoft
_https._tcp.ppa.setup-php.comUnknown
_http._tcp.archive.ubuntu.comUbuntuUbuntu
_https._tcp.esm.ubuntu.comUbuntuUbuntu
apple-relay.fastly-edge.comUnknown
us-west-2.ec2.ports.ubuntu.comUbuntuUbuntu
ports.ubuntu.comUbuntuUbuntu
_http._tcp.us-west-2.ec2.ports.ubuntu.comUbuntuUbuntu
_http._tcp.ports.ubuntu.comUbuntuUbuntu
_https._tcp.ppa.launchpadcontent.netUnknown
stocks-data-service.apple.comUnknown
bag-cdn.itunes-apple.com.akadns.netUnknown
lcdn-locator.apple.comUnknown
apple-relay.cloudflare.comUnknown
cp10.cloudflare.comUnknown
websitereview.corp.apple.comUnknown
init-kt.apple.comUnknown
cloudfront.cdn.snapcraftcontent.comUnknown
dashboard.snapcraft.ioUnknown
api.smoot.apple.comUnknown
api-spotlight.smoot.apple.comUnknown
gateway-oblivious.apple.comUnknown
weather-edge.apple.comUnknown
ml.cdn-apple.comUnknown
ohttp-relay1.fastly-edge.comUnknown
token.safebrowsing.appleUnknown
proxy.safebrowsing.appleUnknown
_http._tcp.mirror.arizona.eduUnknown
mirror.arizona.eduUnknown
_http._tcp.mirrors.sonic.netUnknown
mirrors.sonic.netUnknown
cdn-h3.g.aaplimg.comUnknown
help.origin-apple.com.akadns.netUnknown
api2.smoot.apple.comUnknown
crl3.digicert.comUnknown
gateway.fe2.apple-dns.netUnknown
bag-cdn-lb.itunes-apple.com.akadns.netUnknown
ocsp.usertrust.comUnknown
dns.googleUnknown
_dns.resolver.arpaUnknown
cf.iadsdk.apple.comUnknown
gspe35-ssl.ls.apple.comUnknown
ab.apple.com.akadns.netUnknown
c.apple.newsUnknown
weatherkit.apple.comUnknown
sas.pcms.apple.comUnknown
xp.g.aaplimg.comUnknown
iadsdk.apple.comUnknown
h3.apis.apple.map.fastly.netUnknown
prod.ingestion-edge.prod.dataops.mozgcp.netUnknown
gdmf.v.aaplimg.comUnknown