StepSecurity Logo
StepSecurity
LoginStart free
step-security/setup-rust-toolchain

step-security/setup-rust-toolchain

Secure drop-in replacement for actions-rust-lang/setup-rust-toolchain

Setup a specific Rust toolchain with extra features like problem matchers.

GitHubGitHub Repository

0 stars

Composite

Maintained by StepSecurity

Score updated 6 days ago

Composite Action Details

Pinnable

Yes

GitHub Actions security score comparison

step-security/setup-rust-toolchainactions-rust-lang/setup-rust-toolchain

Score

10/10

7/10

Pinnable

YesYes

License

MIT LicenseMIT License

Maintained

Maintained by StepSecurity13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

0 existing vulnerabilities detected

0 existing vulnerabilities detected

Branch protection

Branch protection is maximal on development and all release branches

branch protection not enabled on development/release branches

AI analysis

Not analyzed yetNot analyzed yet

Manual code review

Upstream changes are reviewed before merging-

Secure publishing

Reproducible builds with SBOM and provenance-

Signed commits

All commits are signed-

Automated security tools

Findings from tools are triaged and fixed before each change-

Popular

Used by StepSecurity enterprise customersUsed by 13024 open-source projects

Security Policy

security policy file detectedsecurity policy file detected

Networking Behavior of step-security/setup-rust-toolchain

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
static.rust-lang.orgUnknown
dns.msftncsi.comUnknown
ghcr.ioGitHubGitHub
pkg-containers.githubusercontent.comGitHubGitHub
updates.cdn-apple.comUnknown
ocsp.globalsign.comUnknown
client.wns.windows.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
gateway.icloud.comUnknown
gdmf.v.aaplimg.comUnknown
cds.apple.comUnknown
help.apple.comUnknown
ipcdn-web.apple.comUnknown
token.safebrowsing.appleUnknown
proxy.safebrowsing.appleUnknown
swallow.apple.comUnknown
ocsp2.apple.comUnknown
bag.itunes.apple.comUnknown
ocsp.digicert.comUnknown
xp.apple.comUnknown
pancake.apple.comUnknown
swscan.apple.comUnknown
swdist.apple.comUnknown
mesu.apple.comUnknown
metrics.icloud.comUnknown
device-config.pcms.apple.comUnknown
configuration.apple.comUnknown
gdmf.apple.comUnknown
oneocsp.microsoft.comMicrosoftMicrosoft
ipv6.msftncsi.comUnknown
login.live.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
incoming.telemetry.mozilla.orgUnknown
prod.ingestion-edge.prod.dataops.mozgcp.netUnknown
mask-api.icloud.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
fe2cr.update.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
au.download.windowsupdate.comUnknown
crl.globalsign.comUnknown
ocsp.usertrust.comUnknown
mask.icloud.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
cdn-h3.g.aaplimg.comUnknown
apple-relay.cloudflare.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
apps.mzstatic.comUnknown
init.itunes.apple.comUnknown
api.apple-cloudkit.comUnknown
ipcdn.apple.comUnknown
gdmf-ados.apple.comUnknown
valid.apple.comUnknown
swdist.g.aaplimg.comUnknown
www.msftconnecttest.comUnknown
calendars.icloud.comUnknown
humb.apple.comUnknown
fbs.smoot.apple.comUnknown
itunes.apple.comUnknown
ohttp-relay1.fastly-edge.comUnknown
apple-relay.fastly-edge.comUnknown
xp.g.aaplimg.comUnknown
lcdn-locator.apple.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
ocsp2.g.aaplimg.comUnknown
safebrowsing.googleapis.comGoogleGoogle
experiments.apple.comUnknown
prod.ingestion-edge.prod.dataservices.mozgcp.netUnknown
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
stocks-data-service.apple.comUnknown
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft