actions/setup-go

actions/setup-go

Set up your GitHub Actions workflow with a specific version of Go

GitHubGitHub Repository

1657 stars

Node.js

Node Action

Score updated 3 days ago

GitHub Actions security score

actions/setup-go

Score

6/10

License

MIT License

Maintained

10 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 9

Vulnerabilities

11 existing vulnerabilities detected

Branch protection

branch protection not enabled on development/release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 57088 open-source projects

Security Policy

security policy file detected

Networking Behavior of actions/setup-go

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
api.github.comGitHubGitHub
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
proxy.golang.orgGolang ProxyGolang Proxy
storage.googleapis.comGoogleGoogle
sum.golang.orgUnknown
golang.orgUnknown
go.devUnknown
raw.githubusercontent.comGitHubGitHub
dl.google.comGoogleGoogle
registry-1.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
config.datadoghq.comUnknown
docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.comDockerHubDockerHub
downloads.sqlc.devUnknown
releases.hashicorp.comHashiCorpHashiCorp
gcr.ioUnknown
registry.npmjs.orgnpm Registrynpm Registry
checkpoint-api.hashicorp.comUnknown
telemetry.nextjs.orgUnknown
nodejs.orgUnknown
release-assets.githubusercontent.comGitHubGitHub
us-docker.pkg.devUnknown
global.endpoint.security.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
unitedstates.cp.wd.microsoft.comMicrosoftMicrosoft
unitedstates.x.cp.wd.microsoft.comMicrosoftMicrosoft
registry.access.redhat.comRedhat
cdn01.quay.ioUnknown
cdn-ubi.redhat.comRedhat
check.trivy.devUnknown
get.anchore.ioUnknown
dl.k8s.ioUnknown
cdn.dl.k8s.ioUnknown
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
md-vjj35s2hccs3.z12.blob.storage.azure.netUnknown
cli.codecov.ioCodecovCodecov
keybase.ioUnknown
ingest.codecov.ioCodecovCodecov
o26192.ingest.us.sentry.ioUnknown
ghcr.ioGitHubGitHub
pkg-containers.githubusercontent.comGitHubGitHub
mirror.gcr.ioUnknown
fulcio.sigstore.devSigstoreSigstore
tuf-repo-cdn.sigstore.devSigstoreSigstore
rekor.sigstore.devSigstoreSigstore
toolbox-data.anchore.ioUnknown
index.docker.ioDockerHubDockerHub
md-hqshfxnvvxdq.z30.blob.storage.azure.netUnknown
salsa.debian.orgUnknown
gitlab.comGitLabGitLab
oss-fuzz-build-logs.storage.googleapis.comGoogleGoogle
github.corp.comUnknown
quay.ioUnknown
dl.min.ioUnknown
updates.fleetdm.comUnknown
mise.jdx.devUnknown
md-xvjvl2qvlfvb.z34.blob.storage.azure.netUnknown
registry.terraform.ioUnknown
mise-versions.jdx.devUnknown
packages.microsoft.comMicrosoftMicrosoft
dns.msftncsi.comUnknown
gateway.icloud.comUnknown
ocsp.sectigo.comUnknown
swscan.apple.comUnknown
swdist.apple.comUnknown
ocsp2.apple.comUnknown
metrics.icloud.comUnknown
ocsp.comodoca.com.cdn.cloudflare.netUnknown
client.wns.windows.comUnknown
bag.itunes.apple.comUnknown
ocsp.digicert.comUnknown
swallow.apple.comUnknown
api.apple-cloudkit.comUnknown
weather-edge.apple.comUnknown
ipcdn.apple.comUnknown
init.itunes.apple.comUnknown
www.microsoft.comMicrosoftMicrosoft
settings-win.data.microsoft.comMicrosoftMicrosoft
xp.apple.comUnknown
pancake.apple.comUnknown
mask-api.icloud.comUnknown
gdmf.apple.comUnknown
assets-mercury.mzstatic.comUnknown
fs.microsoft.comMicrosoftMicrosoft
incoming.telemetry.mozilla.orgUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
configuration.apple.comUnknown
updates.cdn-apple.comUnknown
mesu.apple.comUnknown
configuration.ls.apple.comUnknown
fbs.smoot.apple.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
oneocsp.microsoft.comMicrosoftMicrosoft
api.smoot.apple.comUnknown
login.live.comUnknown
experiments.apple.comUnknown
apps.mzstatic.comUnknown
cf.iadsdk.apple.comUnknown
device-config.pcms.apple.comUnknown
weatherkit.apple.comUnknown
news-edge.apple.comUnknown
c.apple.newsUnknown
apple-relay.cloudflare.comUnknown
gspe1-ssl.ls.apple.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
apple-relay.fastly-edge.comUnknown
lcdn-locator.apple.comUnknown
mask.icloud.comUnknown
ocsp2.g.aaplimg.comUnknown
gdmf-ados.apple.comUnknown
stocks-data-service.apple.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
configuration.apple.com.akadns.netUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
0.pool.ntp.orgUnknown
gsp57-ssl-background.ls.apple.comUnknown
dns.googleUnknown
_dns.resolver.arpaUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
cds.apple.comUnknown
help.apple.comUnknown
gdmf.v.aaplimg.comUnknown
sf-api-token-service.itunes.apple.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
amp-api.media.apple.comUnknown
configuration.v.aaplimg.comUnknown
mask-h2.icloud.comUnknown
get.trivy.devUnknown
valid.apple.comUnknown
gsa.apple.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
au.download.windowsupdate.comUnknown
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
calendars.icloud.comUnknown
humb.apple.comUnknown