actions/checkout

actions/checkout

Action for checking out a repo

GitHubGitHub Repository

7631 stars

Node.js

Node Action

Score updated 49 minutes ago

GitHub Actions security score

actions/checkout

Score

6/10

License

MIT License

Maintained

3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2

Vulnerabilities

11 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 1853440 open-source projects

Security Policy

security policy file detected

Networking Behavior of actions/checkout

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
github.comGitHubGitHub
skia.googlesource.comUnknown
gcr.ioUnknown
boringssl.googlesource.comUnknown
r8.googlesource.comUnknown
git.kernel.dkUnknown
api.github.comGitHubGitHub
github-cloud.githubusercontent.comGitHubGitHub
yum.oracle.comUnknown
mirrors.vcea.wsu.eduUnknown
d2lzkl7pfhq30w.cloudfront.netUnknown
mirrors.wcupa.eduUnknown
atl.mirrors.knownhost.comUnknown
chromium.googlesource.comUnknown
patch-diff.githubusercontent.comGitHubGitHub
instrumentation-telemetry-intake.datadoghq.comUnknown
powitni3dvag4e3vfsuxwbdl.blob.core.windows.netUnknown
auth.safetycli.comUnknown
api.securityscorecards.devUnknown
scans-in.gradle.comUnknown
repos.eggycrew.comUnknown
ftp-nyc.osuosl.orgUnknown
mirror.umd.eduUnknown
nnenix.mm.fcix.netUnknown
ix-denver.mm.fcix.netUnknown
dc.services.visualstudio.comUnknown
sum.golang.orgUnknown
ipfs-adebp.gke-europe.settlemint.comUnknown
objects-origin.githubusercontent.comGitHubGitHub
ipfs-ws.neaweb.chUnknown
ipfs-swarm.greyh.atUnknown
home.pathin.meUnknown
openthread.ioUnknown
ipfs.axlabs.netUnknown
checkpoint-cn.yeaosound.comUnknown
telemetry.redwoodjs.comUnknown
srv.nullob.siUnknown
config.datadoghq.comUnknown
ipfs-node.pcdn.svconcloud.comUnknown
ipfs-c9a6p.settlemint.comUnknown
github.com.kktgveqfb1qudcmjlb3z23h2tb.xx.internal.cloudapp.netUnknown
dweb.quartzbear.linkUnknown
am6.bootstrap.libp2p.ioUnknown
ipfs-store-48eep.settlemint.comUnknown
home.xupernode.comUnknown
ipfs-store-3d9ep.settlemint.comUnknown
sv16.bootstrap.libp2p.ioUnknown
sg1.bootstrap.libp2p.ioUnknown
ipfs1-8c58p.aks-middleeast.settlemint.comUnknown
microsoft.comMicrosoftMicrosoft
packages.microsoft.comMicrosoftMicrosoft
va1.bootstrap.libp2p.ioUnknown
se1.files.someguy123.comUnknown
ipfs-92a0p.settlemint.comUnknown
qrze66qtsvxvfqere2mfdeot.blob.core.windows.netUnknown
aab76adad815848ca82122392d46393c-1873381457.us-east-2.elb.amazonaws.comUnknown
gitlab.comGitLabGitLab
2dg2rikggido7fysjhd7mr5c.blob.core.windows.netUnknown
t2g5a7hsasfeeerv7pdgpygo.blob.core.windows.netUnknown
istanbul.le-space.deUnknown
sony-bank-development-ipfs-1-36dfp.gke-japan.settlemint.comUnknown
checkpoint-hk.ipns.networkUnknown
checkpoint-hk.yeaosound.comUnknown
a2a4c5c095f8f4421ae16786a4865406-692485639.us-east-2.elb.amazonaws.comUnknown
repo.maven.apache.orgUnknown
containers.pkg.github.comGitHubGitHub
datapod-ws.gdev.1000i100.frUnknown
gdev.1000i100.frUnknown
s3zwo47y6v6ynwdzeq42glrv.blob.core.windows.netUnknown
greenbond.esUnknown
ipfs-store-cfc9p.settlemint.comUnknown
nft-ipfs-d9e4p.settlemint.comUnknown
ipfs-a84aap.gke-europe-staging.settlemint.comUnknown
atd-ipfs-1-62d0cp.gke-europe.settlemint.comUnknown
ipfs.22336699.xyzUnknown
ipfs-1-212eep.gke-europe-staging.settlemint.comUnknown
threadgroup.orgUnknown
link.springer.comUnknown
ipns-kubo-2.vin1.filebase.ioUnknown
pmu-skat-ipfs-7541cp.gke-europe-staging.settlemint.comUnknown
p2p.gke-middleeast.settlemint.comUnknown
objects.githubusercontent.comGitHubGitHub
ipns-kubo-0.vin1.filebase.ioUnknown
ipns-kubo-1.vin1.filebase.ioUnknown
git.ioUnknown
builds.dotnet.microsoft.comMicrosoftMicrosoft
kore.peelvalley.com.auUnknown
external1.ddns.peelvalley.com.auUnknown
cli.codecov.ioCodecovCodecov
media.laserlewdude.comUnknown
crates.ioUnknown
home.m.foilen.comUnknown
ipfs-swarm.fxhash2.xyzUnknown
112-82-110-25.k51qzi5uqu5dmj0y7896i0mxl2h5lyqs9up6duhlula4hsf6mxpfvjyesahrp5.libp2p.directUnknown
esm.ubuntu.comUbuntuUbuntu
d-gj2h7tnxlh.execute-api.us-west-2.amazonaws.comUnknown
amazon-ssm-us-west-2.s3.us-west-2.amazonaws.comUnknown
s3.us-west-2.amazonaws.comUnknown
ec2.us-west-2.amazonaws.comUnknown
arxiv.orgUnknown
dns.googleUnknown
api0.prismacloud.ioUnknown
ec2.us-east-1.amazonaws.comUnknown
pypi.orgPython RegistryPython Registry
static.rust-lang.orgUnknown
prtcacprodeus2file7.blob.core.windows.netUnknown
golang.orgUnknown
gk2hacprodeus1file7.blob.core.windows.netUnknown
dotnetbuilds.azureedge.netUnknown
raw.githubusercontent.comGitHubGitHub
api.deps.devUnknown
changelogs.ubuntu.comUbuntuUbuntu
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
canonical-bos01.cdn.snapcraftcontent.comUnknown
conda.anaconda.orgUnknown
prefix.devUnknown
packages.prefix.devUnknown
shards.prefix.devUnknown
uploads.github.comGitHubGitHub
registry.npmjs.orgnpm Registrynpm Registry
binaries.prisma.shUnknown
checkpoint.prisma.ioUnknown
telemetry.vercel.comUnknown
telemetry.nextjs.orgUnknown
aka.msUnknown
releases.nixos.orgUnknown
models.github.aiUnknown
azure.archive.ubuntu.comUbuntuUbuntu
release-assets.githubusercontent.comGitHubGitHub
x.cp.wd.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
unitedstates.x.cp.wd.microsoft.comMicrosoftMicrosoft
unitedstates.cp.wd.microsoft.comMicrosoftMicrosoft
ghcr.ioGitHubGitHub
pkg-containers.githubusercontent.comGitHubGitHub
proxy.golang.orgGolang ProxyGolang Proxy
storage.googleapis.comGoogleGoogle
check.trivy.devUnknown
registry.access.redhat.comRedhat
cdn01.quay.ioUnknown
cdn-ubi.redhat.comRedhat
mirror.gcr.ioUnknown
get.anchore.ioUnknown
dl.k8s.ioUnknown
cdn.dl.k8s.ioUnknown
fulcio.sigstore.devSigstoreSigstore
index.docker.ioDockerHubDockerHub
www.bestpractices.devUnknown
oss-fuzz-build-logs.storage.googleapis.comGoogleGoogle
tuf-repo-cdn.sigstore.devSigstoreSigstore
rekor.sigstore.devSigstoreSigstore
api.osv.devUnknown
plugins.gradle.orgGradleGradle
repo.gradle.orgGradleGradle
jcenter.bintray.comUnknown
downloads.gradle.orgGradleGradle
cdn.azul.comUnknown
gds.oracle.comUnknown
caffeine.gradle-enterprise.cloudUnknown
services.gradle.orgGradleGradle
api.foojay.ioUnknown
repo1.maven.orgUnknown
schemastore.orgUnknown
oss.sonatype.orgUnknown
plugins-artifacts.gradle.orgGradleGradle
download.oracle.comUnknown
centralus.data.mcr.microsoft.comMicrosoftMicrosoft
mcr.microsoft.comMicrosoftMicrosoft
westus2.data.mcr.microsoft.comMicrosoftMicrosoft
westus.data.mcr.microsoft.comMicrosoftMicrosoft
o1.ingest.sentry.ioUnknown
dashboard.snapcraft.ioUnknown
releases.hashicorp.comHashiCorpHashiCorp
checkpoint-api.hashicorp.comUnknown
api.scorecard.devUnknown
get.helm.shUnknown
files.pythonhosted.orgPython RegistryPython Registry
services.nvd.nist.govNISTNIST
api.vulncheck.comUnknown
mxirhoir1bkom.mrap.accesspoint.s3-global.amazonaws.comUnknown
npm.pkg.github.comGitHubGitHub
pkg-npm.githubusercontent.comGitHubGitHub
nodejs.orgUnknown
get.buildpulse.ioUnknown
buildpulse-uploads.s3.amazonaws.comUnknown
storybook.js.orgUnknown
cgr.devUnknown
index.rubygems.orgRubyGemsRubyGems
rubygems.orgRubyGemsRubyGems
ortelius.github.ioUnknown
www.google.comUnknown
releases.bazel.buildUnknown
bcr.bazel.buildUnknown
fonts.googleapis.comGoogleGoogle
fonts.gstatic.comUnknown
golangci-lint.runUnknown
mirror.bazel.buildUnknown
public.ecr.awsUnknown
d2glxqk2uabbnd.cloudfront.netUnknown
kubernetesjsonschema.devUnknown
quay.ioUnknown
dl.min.ioUnknown
ingest.codecov.ioCodecovCodecov
o26192.ingest.us.sentry.ioUnknown
sts.googleapis.comGoogleGoogle
iamcredentials.googleapis.comGoogleGoogle
us-west1-docker.pkg.devUnknown
docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.comDockerHubDockerHub
debian.map.fastlydns.netUnknown
sp1.succinct.xyzUnknown
index.crates.ioUnknown
static.crates.ioUnknown
sp1-circuits.s3.us-east-2.amazonaws.comUnknown
gist.github.comGitHubGitHub
mise.jdx.devUnknown
keybase.ioUnknown
ssm.us-east-1.amazonaws.comUnknown
7-72-2-flare.agent.datadoghq.comUnknown
archive.ubuntu.comUbuntuUbuntu
sh.rustup.rsUnknown
security.ubuntu.comUbuntuUbuntu
logs.us-east-1.amazonaws.comUnknown
ec2messages.us-east-1.amazonaws.comUnknown
transfer.xethub.hf.coUnknown
huggingface.coUnknown
api.gradio.appUnknown
get.trivy.devUnknown
uuqtu3xayzkbzb5egkax3c7l.blob.core.windows.netUnknown
gitee.comUnknown
atomgit.comUnknown
playwright.download.prss.microsoft.comMicrosoftMicrosoft
ocsp.sectigo.comUnknown
dns.msftncsi.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
httpbin.orgUnknown
fulcio.sigstage.devUnknown
rekor.sigstage.devUnknown
monitoring.us-east-1.amazonaws.comUnknown
pinpoint.us-east-1.amazonaws.comUnknown
calendars.icloud.comUnknown
pancake.apple.comUnknown
fs.microsoft.comMicrosoftMicrosoft
ocsp.comodoca.com.cdn.cloudflare.netUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
ocsp2.apple.comUnknown
configuration.apple.comUnknown
gateway.icloud.comUnknown
configuration.ls.apple.comUnknown
blob.bn9prdstrz04a.store.core.windows.netUnknown
client.wns.windows.comUnknown
incoming.telemetry.mozilla.orgUnknown
ocsp.digicert.comUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
init.itunes.apple.comUnknown
swscan.apple.comUnknown
mesu.apple.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
gdmf.apple.comUnknown
bag.itunes.apple.comUnknown
xp.apple.comUnknown
gspe1-ssl.ls.apple.comUnknown
fbs.smoot.apple.comUnknown
swallow.apple.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
swdist.apple.comUnknown
mask-api.icloud.comUnknown
metrics.icloud.comUnknown
api.apple-cloudkit.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
oneocsp.microsoft.comMicrosoftMicrosoft
apple-relay.cloudflare.comUnknown
0.pool.ntp.orgUnknown
apple-relay.fastly-edge.comUnknown
updates.cdn-apple.comUnknown
ocsp2.g.aaplimg.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
xp.v.aaplimg.comUnknown
weatherkit.apple.comUnknown
login.live.comUnknown
init-kt.apple.comUnknown
ipcdn-web.apple.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
amp-api.media.apple.comUnknown
configuration.apple.com.akadns.netUnknown
device-config.pcms.apple.comUnknown
configuration-lb.ls-apple.com.akadns.netUnknown
apps.mzstatic.comUnknown
experiments.apple.comUnknown
assets-mercury.mzstatic.comUnknown
gspe35-ssl.ls.apple.comUnknown
gsp-ssl.ls.apple.comUnknown
gsp-ssl.ls-apple.com.akadns.netUnknown
gsa.apple.comUnknown
cds.apple.comUnknown
help.apple.comUnknown
xp.itunes-apple.com.akadns.netUnknown
news-edge.apple.comUnknown
ipcdn.apple.comUnknown
cdn.icloud-content.comUnknown
iadsdk.apple.comUnknown
cf.iadsdk.apple.comUnknown
adl.windows.comUnknown
crl.sectigo.comUnknown
download.windowsupdate.comUnknown
humb.apple.comUnknown
stocks-edge.apple.comUnknown
au.download.windowsupdate.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
ocsp.comodoca.comUnknown
ingress.coralogix.usUnknown
_dns.resolver.arpaUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
fd.api.iris.microsoft.comMicrosoftMicrosoft
valid.apple.comUnknown
ocsp.usertrust.comUnknown
swscan-cdn.apple.com.akadns.netUnknown
c.apple.newsUnknown
ocsp2.apple.com.edgekey.netUnknown
lcdn-locator.apple.comUnknown
gateway.fe2.apple-dns.netUnknown
ipcdn-lb.apple.com.akadns.netUnknown
e3528.dscg.akamaiedge.netUnknown
get-bx.g.aaplimg.comUnknown
weatherkit.apple.com.akadns.netUnknown
stocks-data-service.apple.comUnknown
releases.astral.shUnknown
gdmf-ados.apple.comUnknown
mask.icloud.comUnknown
slscr.update.microsoft.comMicrosoftMicrosoft
fe3cr.delivery.mp.microsoft.comMicrosoftMicrosoft
gateway-oblivious.apple.comUnknown
help.origin-apple.com.akadns.netUnknown
mesu-cdn.apple.com.akadns.netUnknown
ecs.office.comUnknown
gdmf.v.aaplimg.comUnknown
swdist.apple.com.akadns.netUnknown
ocsp.edge.digicert.comUnknown
dl.delivery.mp.microsoft.comMicrosoftMicrosoft
1d.tlu.dl.delivery.mp.microsoft.comMicrosoftMicrosoft
updates.g.aaplimg.comUnknown
weather-edge.apple.comUnknown
unlinkability.apple.comUnknown
setup.icloud.comUnknown
c.apple.news.edgekey.netUnknown
configuration.v.aaplimg.comUnknown
api.smoot.apple.comUnknown
validation-v2.sls.microsoft.comMicrosoftMicrosoft
blob.blz25prdstrz09a.store.core.windows.netUnknown
dap.pat-issuer.cloudflare.comUnknown
iam.cloud.ibm.comUnknown
api.dataplatform.cloud.ibm.comUnknown
us-south.ml.cloud.ibm.comUnknown
wns2-ch1p.wns.windows.comUnknown
packagist.orgUnknown
repo.packagist.orgUnknown
pear.php.netUnknown
pecl.php.netUnknown
cdn.cypress.ioUnknown
download.cypress.ioUnknown
swcdn.apple.comUnknown
tsfe.trafficshaping.dsp.mp.microsoft.comMicrosoftMicrosoft
1a.tlu.dl.delivery.mp.microsoft.comMicrosoftMicrosoft
ab.apple.com.akadns.netUnknown
cac-ocsp.digicert.com.edgekey.netUnknown