anthropics/claude-code-action
Composite Action Details
Pinnable | Yes |
GitHub Actions security score
| anthropics/claude-code-action | |
|---|---|
Score | 8/10 |
License | MIT License |
Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Vulnerabilities | 21 existing vulnerabilities detected |
Branch protection | branch protection is not maximal on development and all release branches |
Manual code review | - |
Secure publishing | - |
Signed commits | - |
Automated security tools | - |
Popular | Used by 1860 open-source projects |
Security Policy | security policy file detected |
Networking Behavior of anthropics/claude-code-action
This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.
Popular DestinationUnknown Destination
| Network Destination | Owner |
|---|---|
| registry.npmjs.org | |
| api.anthropic.com | Unknown |
| api.github.com | |
| github.com | |
| statsig.anthropic.com | Unknown |
| bun.sh | Unknown |
| objects.githubusercontent.com | |
| o1158394.ingest.us.sentry.io | Unknown |
| release-assets.githubusercontent.com | |
| pypi.org | |
| files.pythonhosted.org | |
| claude.ai | Unknown |
| storage.googleapis.com | |
| raw.githubusercontent.com | |
| downloads.claude.ai | Unknown |
| http-intake.logs.datadoghq.com | Unknown |
| private-user-images.githubusercontent.com | |
| mcp.context7.com | Unknown |
| learn.microsoft.com | |
| api.nuget.org | Unknown |
| ocsp.digicert.com | Unknown |
| crl3.digicert.com | Unknown |
| dc.services.visualstudio.com | Unknown |
| crl4.digicert.com | Unknown |
| www.microsoft.com | |
| ts-crl.ws.symantec.com | Unknown |
| s.symcb.com | Unknown |
| s.symcd.com | Unknown |
| ts-ocsp.ws.symantec.com | Unknown |
| http-intake.logs.us5.datadoghq.com | Unknown |
| developer.mozilla.org | Unknown |
| packages.microsoft.com | |
| proxy.golang.org | |
| prod.app-api.stepsecurity.io | Unknown |
| pkg.go.dev | Unknown |
| sum.golang.org | Unknown |
| code.claude.com | Unknown |
| crates.io | Unknown |
| veriai.chat | Unknown |
| cafe.github.com | |
| martinvonz.github.io | Unknown |
| jj-vcs.github.io | Unknown |
| docs.jj-vcs.dev | Unknown |
| openrouter.ai | Unknown |
| api.deepseek.com | Unknown |
| api.groq.com | Unknown |
| smtp-relay.brevo.com | Unknown |
| pub.dev | Unknown |
| go.dev | Unknown |
| dl.google.com | |
| azure.archive.ubuntu.com | |
| esm.ubuntu.com | |
| technologiesraycraft-1778048629514.atlassian.net | Unknown |
| hn.algolia.com | Unknown |
| lore.kernel.org | Unknown |
| www.phoronix.com | Unknown |
| www.cisa.gov | |
| blog.janestreet.com | Unknown |
| www.reddit.com | Unknown |
| huggingface.co | Unknown |
| www.swift.org | Unknown |
| planetscale.com | Unknown |
| daniel.haxx.se | Unknown |
| platform.claude.com | Unknown |
| www.iroh.computer | Unknown |
| docs.hetzner.com | Unknown |
| www.salesforce.com | Unknown |
| crankgpt.com | Unknown |
| roman.pt | Unknown |
| typst.app | Unknown |
| cohere.com | Unknown |
| kobzol.github.io | Unknown |
| www.anthropic.com | Unknown |
| www.theregister.com | Unknown |
| openjdk.org | Unknown |
| www.cnbc.com | Unknown |
| git-scm.com | Unknown |
| vickiboykis.com | Unknown |
| kde.org | Unknown |
| status.claude.com | Unknown |
| discuss.grapheneos.org | Unknown |
| qwen.ai | Unknown |
| news.ycombinator.com | Unknown |
| www.githubstatus.com | |
| www.tno.nl | Unknown |
| reflex.dev | Unknown |
| status.openai.com | Unknown |
| writings.stephenwolfram.com | Unknown |
| artificialanalysis.ai | Unknown |
| lore.org | Unknown |
| www.rfc-editor.org | Unknown |
| charitydotwtf.substack.com | Unknown |
| www.lutr.dev | Unknown |
| mll.sh | Unknown |
| openai.com | Unknown |
| browser-use.com | Unknown |
| kerkour.com | Unknown |
| otty.sh | Unknown |
| inessential.com | Unknown |
| techcrunch.com | Unknown |
| www.dotnetramblings.com | Unknown |
| pricepertoken.com | Unknown |
| lwn.net | Unknown |
| digg.com | Unknown |
| blog.cloudflare.com | Unknown |
| blog.alexellis.io | Unknown |
| api-docs.deepseek.com | Unknown |
| orchidfiles.com | Unknown |
| blog.modelcontextprotocol.io | Unknown |
| americanexpress.io | Unknown |
| simonwillison.net | Unknown |
| devblogs.microsoft.com | |
| letsencrypt.status.io | Unknown |
| blog.ui.com | Unknown |
| godotengine.org | Unknown |
| www.greybeam.ai | Unknown |
| horizon3.ai | Unknown |
| www.hyundai.com | Unknown |
| overreacted.io | Unknown |
| www.helpnetsecurity.com | Unknown |
| newsletter.kentbeck.com | Unknown |
| aws.amazon.com | Unknown |
| www.smpte.org | Unknown |
| www.tomshardware.com | Unknown |
| sibexi.co | Unknown |
| www.lispm.net | Unknown |
| www.google.com | Unknown |
| martinfowler.com | Unknown |
| brooker.co.za | Unknown |
| export.arxiv.org | Unknown |
| pragprog.com | Unknown |
| nostarch.com | Unknown |
| www.youtube.com | Unknown |
| rss.arxiv.org | Unknown |
| ocaml.org | Unknown |
| support.claude.com | Unknown |
| sakana.ai | Unknown |
| blog.apnic.net | Unknown |
| docs.deno.com | Unknown |
| mitchellh.com | Unknown |
| patrickmccanna.net | Unknown |
| nevergivethemyourface.com | Unknown |
| fil-c.org | Unknown |
| hustvl.github.io | Unknown |
| role-confusion.github.io | Unknown |
| oak.space | Unknown |
| www.crunchydata.com | Unknown |
| blog.racket-lang.org | Unknown |
| spur.us | Unknown |
| unsloth.ai | Unknown |
| arxiv.org | Unknown |
| finance.yahoo.com | Unknown |
| jchri.st | Unknown |
| mistral.ai | Unknown |
| swelljoe.com | Unknown |
| swiftpackageindex.com | Unknown |
| words.filippo.io | Unknown |
| lucumr.pocoo.org | Unknown |
| blog.dshr.org | Unknown |
| swipe.futo.tech | Unknown |
| www.modular.com | Unknown |
| blog.google | Unknown |
| posthog.com | Unknown |
| bunny.net | Unknown |
| www.cloudflarestatus.com | Unknown |
| status.npmjs.org | Unknown |
| discordstatus.com | Unknown |
| deno.com | Unknown |
| ziglang.org | Unknown |
| aisle.com | Unknown |
| gchandbook.org | Unknown |
| blog.lastpass.com | Unknown |
| www.jeffgeerling.com | Unknown |
| www.fernandoi.cl | Unknown |
| docs.github.com | |
| scrollprize.org | Unknown |
| nesbitt.io | Unknown |
| www.techpowerup.com | Unknown |
| venturebeat.com | Unknown |
| www.marktechpost.com | Unknown |
| blog.doubleword.ai | Unknown |
| nx.dev | Unknown |
| gcc.gnu.org | Unknown |
| ngrok.com | Unknown |
| akrites.org | Unknown |
| www.linuxfoundation.org | Unknown |
| w.pitula.me | Unknown |
| grack.com | Unknown |
| cybernews.com | Unknown |
| femtosec.io | Unknown |
| console.modular.com | Unknown |
| clickhouse.com | Unknown |
| lyra.horse | Unknown |
| cephalosec.com | Unknown |
| cdn.playwright.dev | Unknown |
| playwright.download.prss.microsoft.com | |
| semgrep.dev | Unknown |
| 12gramsofcarbon.com | Unknown |
| danunparsed.com | Unknown |
| top500.org | Unknown |
| petities.nl | Unknown |
| duckduckgo.com | Unknown |
| campagnes.degoedezaak.org | Unknown |
| html.duckduckgo.com | Unknown |
| schamper.dev | Unknown |
| mise-versions.jdx.dev | Unknown |
| tuf-repo-cdn.sigstore.dev | |
| quesma.com | Unknown |
| fergusfinn.com | Unknown |
| humphri.es | Unknown |
| www.belastingdienst.nl | Unknown |
| www.rijksfinancien.nl | Unknown |
| www.cbs.nl | Unknown |
| longcat.chat | Unknown |
| thereallo.dev | Unknown |
| waag.org | Unknown |
| link.springer.com | Unknown |
| idp.springer.com | Unknown |
| deepmind.google | Unknown |
| claude.com | Unknown |
| vosen.github.io | Unknown |
| docs.mistral.ai | Unknown |
| www.snowflake.com | Unknown |
| research.google | Unknown |
| statusgator.com | Unknown |
| nixos.org | Unknown |
| box2d.org | Unknown |
| ffmpeg.org | Unknown |
| asahilinux.org | Unknown |
| github.blog | Unknown |
| f-droid.org | Unknown |
| api.supabase.com | Unknown |
| mcp.supabase.com | Unknown |
| voidzero.dev | Unknown |
| mathstodon.xyz | Unknown |
| senior-swe-bench.snorkel.ai | Unknown |
| blog.podman.io | Unknown |
| www.dbos.dev | Unknown |
| nsa.2026.action.cr.yp.to | Unknown |
| joeyh.name | Unknown |
| cursor.com | Unknown |
| www.lmdb.tech | Unknown |
| www.zerofs.net | Unknown |
| blog.okturtles.org | Unknown |
| webkit.org | Unknown |
| www.ubicloud.com | Unknown |
| wordgard.net | Unknown |
| peteris.rocks | Unknown |
| javoriuski.com | Unknown |
| adamraudonis.github.io | Unknown |
| ui.shadcn.com | Unknown |
| hackerfactor.com | Unknown |
| blog.rust-lang.org | Unknown |
| blog.flipper.net | Unknown |
| help.openai.com | Unknown |
| www.opentools.studio | Unknown |
| segflow.github.io | Unknown |
| martinalderson.com | Unknown |
| openwall.com | Unknown |
| clojure.org | Unknown |
| www.openssh.com | Unknown |
| better-auth.com | Unknown |
| nvd.nist.gov | |
| www.openssh.org | Unknown |
| kb.cert.org | Unknown |
| blog.zksecurity.xyz | Unknown |
| astro.build | Unknown |
| pgdog.dev | Unknown |
| www.fastcompany.com | Unknown |
| helpx.adobe.com | Unknown |
| noma.security | Unknown |
| www.neowin.net | Unknown |
| nebusec.ai | Unknown |
| tris.sherliker.net | Unknown |
| x.ai | Unknown |
| bun.com | Unknown |
| www.hmans.dev | Unknown |
| andrewkelley.me | Unknown |
| ai.meta.com | Unknown |
| hy.tencent.com | Unknown |
| www.euronews.com | Unknown |
| www.tencent.com | Unknown |
| dev.meta.ai | Unknown |
| datacenter.iers.org | Unknown |
| nahla.dev | Unknown |
| www.gingerbill.org | Unknown |
| unstack.io | Unknown |
| www.jetbrains.com | Unknown |
| status.launchdarkly.com | Unknown |
| avi.press | Unknown |
| tiki.li | Unknown |
| status.crates.io | Unknown |
| evanhahn.com | Unknown |
| gist.github.com | |
| antjs.org | Unknown |
| io-fund.com | Unknown |
| timeseriesofindia.com | Unknown |
| thebeach.dev | Unknown |
| terrytao.wordpress.com | Unknown |
| dakra.github.io | Unknown |
| systima.ai | Unknown |
| scrapfly.dev | Unknown |
| mrbruh.com | Unknown |
| ploy.ai | Unknown |
| raymyers.org | Unknown |
| antirez.com | Unknown |
| get-inscribe.com | Unknown |
| www.internationalcyberdigest.com | Unknown |
| scottwillsey.com | Unknown |
| lalitm.com | Unknown |
| purplesyringa.moe | Unknown |
| antonz.org | Unknown |
| new.cloudflarestatus.com | Unknown |
| docs.aws.amazon.com | Unknown |
| mindgard.ai | Unknown |
| jola.dev | Unknown |
| www.ayush.digital | Unknown |
| tailscale.com | Unknown |
| www.starfleetmath.com | Unknown |
| www.tenable.com | Unknown |
| thinkingmachines.ai | Unknown |
| www.neomindlabs.com | Unknown |
| typesanitizer.com | Unknown |
| www.kimi.com | Unknown |
| rtfeldman.com | Unknown |
| lmstudio.ai | Unknown |
| turso.tech | Unknown |
| pydantic.dev | Unknown |
| onatm.dev | Unknown |
| www.theocharis.dev | Unknown |
| solod.dev | Unknown |
| blog.lyc8503.net | Unknown |
| tmaproduction.blob.core.windows.net | Unknown |
| 9to5mac.com | Unknown |
| www.isomorphiclabs.com | Unknown |
| health.aws.amazon.com | Unknown |
| slcyber.io | Unknown |
| telemetry.nextjs.org | Unknown |
| maurycyz.com | Unknown |
| videocardz.com | Unknown |
| www.igorslab.de | Unknown |
| workshop.cjpais.com | Unknown |
| codex-resets.com | Unknown |
| queue.acm.org | Unknown |
| www.minecraft.net | Unknown |
| ollama.com | Unknown |
| news.risky.biz | Unknown |
| wren.wtf | Unknown |