step-security/dtolnay-rust-toolchain

Secure drop-in replacement for dtolnay/rust-toolchain

Concise GitHub Action for installing a Rust toolchain.

GitHub Repository

0 stars

Composite

Maintained by StepSecurity

Score updated 3 days ago

GitHub Actions security score comparison

	step-security/dtolnay-rust-toolchain	dtolnay/rust-toolchain
Score	10/10	6/10
License	MIT License	MIT License
Maintained	Maintained by StepSecurity	1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Vulnerabilities	0 existing vulnerabilities detected	0 existing vulnerabilities detected
Branch protection	Branch protection is maximal on development and all release branches	branch protection is not maximal on development and all release branches
Manual code review	Upstream changes are reviewed before merging	-
Secure publishing	Reproducible builds with SBOM and provenance	-
Signed commits	All commits are signed	-
Automated security tools	Findings from tools are triaged and fixed before each change	-
Popular	Used by StepSecurity enterprise customers	Used by 17824 open-source projects
Security Policy	security policy file detected	security policy file detected

Networking Behavior of step-security/dtolnay-rust-toolchain

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination

Network Destination	Owner
static.rust-lang.org	Unknown
gdmf.apple.com	Unknown
device-config.pcms.apple.com	Unknown
calendars.icloud.com	Unknown
mesu.apple.com	Unknown
ocsp.usertrust.com	Unknown
gateway.icloud.com	Unknown
api.apple-cloudkit.fe2.apple-dns.net	Unknown
swscan.apple.com	Unknown
ipcdn.apple.com	Unknown
xp.apple.com	Unknown
e3528.dscg.akamaiedge.net	Unknown
api.apple-cloudkit.com	Unknown
ocsp2.apple.com	Unknown
swdist.g.aaplimg.com	Unknown