shivammathur/setup-php

shivammathur/setup-php

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

GitHubGitHub Repository

3264 stars

Node.js

Node Action

Maintained action available

Score updated 7 hours ago

GitHub Actions security score

shivammathur/setup-php

Score

9/10

Pinnable

Yes

License

MIT License

Maintained

30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

3 existing vulnerabilities detected

Branch protection

Branch protection is maximal on development and all release branches

AI analysis

4 Security findings

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 85632 open-source projects

Security Policy

security policy file detected

Networking Behavior of shivammathur/setup-php

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
raw.githubusercontent.comGitHubGitHub
raw.github.comGitHubGitHub
azure.archive.ubuntu.comUbuntuUbuntu
dl.cloudsmith.ioUnknown
getcomposer.orgUnknown
archive.ubuntu.comUbuntuUbuntu
packages.microsoft.comMicrosoftMicrosoft
ppa.launchpadcontent.netUnknown
esm.ubuntu.comUbuntuUbuntu
security.ubuntu.comUbuntuUbuntu
api.launchpad.netUnknown
keyserver.ubuntu.comUbuntuUbuntu
pgp.mit.eduUnknown
keys.openpgp.orgUnknown
ppa.launchpad.netUnknown
pecl.php.netUnknown
packagist.orgUnknown
pear.php.netUnknown
download.oracle.comUnknown
cdn.jsdelivr.netUnknown
setup-php.comUnknown
repo.packagist.orgUnknown
phar.phpunit.deUnknown
api.github.comGitHubGitHub
release-assets.githubusercontent.comGitHubGitHub
x.cp.wd.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
registry.npmjs.orgnpm Registrynpm Registry
artifacts.setup-php.comUnknown
artifacts.php-ubuntu.setup-php.comUnknown
ppa.setup-php.comUnknown
curl.haxx.seUnknown
curl.seUnknown
xdebug.orgUnknown
downloads.php.netUnknown
dns.msftncsi.comUnknown
ocsp.sectigo.comUnknown
ghcr.ioGitHubGitHub
pkg-containers.githubusercontent.comGitHubGitHub
doc.php.netUnknown
ocsp2.apple.comUnknown
gdmf.apple.comUnknown
updates.cdn-apple.comUnknown
pancake.apple.comUnknown
valid.apple.comUnknown
configuration.apple.comUnknown
cds.apple.comUnknown
help.apple.comUnknown
ocsp2.g.aaplimg.comUnknown
configuration.ls.apple.comUnknown
mesu.apple.comUnknown
init.itunes.apple.comUnknown
0.pool.ntp.orgUnknown
news-edge.apple.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
incoming.telemetry.mozilla.orgUnknown
ocsp.digicert.comUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
swallow.apple.comUnknown
swscan.apple.comUnknown
bag.itunes.apple.comUnknown
fbs.smoot.apple.comUnknown
mask-api.icloud.comUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
configuration-row-lb.apple.com.akadns.netUnknown
swdist.g.aaplimg.comUnknown
experiments.apple.comUnknown
apps.mzstatic.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
xp.apple.comUnknown
swdist.apple.comUnknown
calendars.icloud.comUnknown
device-config.pcms.apple.comUnknown
mesu-cdn.apple.com.akadns.netUnknown
configuration.apple.com.akadns.netUnknown
dc.services.visualstudio.comUnknown
login.live.comUnknown
wns2-by3p.wns.windows.comUnknown
oneocsp.microsoft.comMicrosoftMicrosoft
client.wns.windows.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
metrics.icloud.comUnknown
gateway.icloud.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
au.download.windowsupdate.comUnknown
adl.windows.comUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
dl.delivery.mp.microsoft.comMicrosoftMicrosoft
1d.tlu.dl.delivery.mp.microsoft.comMicrosoftMicrosoft
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
time.windows.comUnknown
wns2-bn3p.wns.windows.comUnknown
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
azkms.core.windows.netUnknown
tas02.cws.update.microsoft.comMicrosoftMicrosoft
e3528.dscg.akamaiedge.netUnknown
v1.ta2.fe2cr.update.microsoft.comMicrosoftMicrosoft
wns2-ch1p.wns.windows.comUnknown
www.powershellgallery.comUnknown
cdn.powershellgallery.comUnknown
ecs.office.comUnknown
ipcdn.apple.comUnknown
ocsp.edge.digicert.comUnknown
displaycatalog.mp.microsoft.comMicrosoftMicrosoft
tas01.cwsapp.update.microsoft.comMicrosoftMicrosoft
geover.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
fs.microsoft.comMicrosoftMicrosoft
arc.msn.comUnknown
fd.api.iris.microsoft.comMicrosoftMicrosoft
ocsp.comodoca.comUnknown
crl.sectigo.comUnknown
api.apple-cloudkit.comUnknown
setup.icloud.comUnknown
fe3cr.delivery.mp.microsoft.comMicrosoftMicrosoft
mozilla.map.fastly.netUnknown
detectportal.firefox.comUnknown
is4-ssl.mzstatic.comUnknown
is3-ssl.mzstatic.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
assets-mercury.mzstatic.comUnknown
images-mercury.mzstatic.comUnknown
is2-ssl.mzstatic.comUnknown
amp-api.media.apple.comUnknown
is5-ssl.mzstatic.comUnknown
updates-http.cdn-apple.comUnknown
mask.icloud.comUnknown
humb.apple.comUnknown
gdmf-ados.apple.comUnknown
ipcdn-web.apple.comUnknown
itunes.apple.comUnknown
configuration.g.aaplimg.comUnknown
publicassets.cdn-apple.comUnknown
_http._tcp.mirrors.ubuntu.comUbuntuUbuntu
mirrors.ubuntu.comUbuntuUbuntu
_http._tcp.security.ubuntu.comUbuntuUbuntu
contracts.canonical.comUnknown
_https._tcp.packages.microsoft.comMicrosoftMicrosoft
_https._tcp.ppa.setup-php.comUnknown
_http._tcp.archive.ubuntu.comUbuntuUbuntu
_https._tcp.esm.ubuntu.comUbuntuUbuntu
apple-relay.fastly-edge.comUnknown
us-west-2.ec2.ports.ubuntu.comUbuntuUbuntu
ports.ubuntu.comUbuntuUbuntu
_http._tcp.us-west-2.ec2.ports.ubuntu.comUbuntuUbuntu
_http._tcp.ports.ubuntu.comUbuntuUbuntu
_https._tcp.ppa.launchpadcontent.netUnknown
stocks-data-service.apple.comUnknown
bag-cdn.itunes-apple.com.akadns.netUnknown
lcdn-locator.apple.comUnknown
apple-relay.cloudflare.comUnknown
cp10.cloudflare.comUnknown
websitereview.corp.apple.comUnknown
init-kt.apple.comUnknown
cloudfront.cdn.snapcraftcontent.comUnknown
dashboard.snapcraft.ioUnknown
api.smoot.apple.comUnknown
api-spotlight.smoot.apple.comUnknown
gateway-oblivious.apple.comUnknown
weather-edge.apple.comUnknown
ml.cdn-apple.comUnknown
ohttp-relay1.fastly-edge.comUnknown
token.safebrowsing.appleUnknown
proxy.safebrowsing.appleUnknown
_http._tcp.mirror.arizona.eduUnknown
mirror.arizona.eduUnknown
_http._tcp.mirrors.sonic.netUnknown
mirrors.sonic.netUnknown
cdn-h3.g.aaplimg.comUnknown
help.origin-apple.com.akadns.netUnknown
api2.smoot.apple.comUnknown
crl3.digicert.comUnknown
gateway.fe2.apple-dns.netUnknown
bag-cdn-lb.itunes-apple.com.akadns.netUnknown
ocsp.usertrust.comUnknown
dns.googleUnknown
_dns.resolver.arpaUnknown
cf.iadsdk.apple.comUnknown
gspe35-ssl.ls.apple.comUnknown
ab.apple.com.akadns.netUnknown
c.apple.newsUnknown
weatherkit.apple.comUnknown
sas.pcms.apple.comUnknown
xp.g.aaplimg.comUnknown
iadsdk.apple.comUnknown
h3.apis.apple.map.fastly.netUnknown
prod.ingestion-edge.prod.dataops.mozgcp.netUnknown
gdmf.v.aaplimg.comUnknown
gsa.apple.comUnknown
e5977.dsce9.akamaiedge.netUnknown
mask-api.fe2.apple-dns.netUnknown
is1-ssl.mzstatic.comUnknown
prod.ingestion-edge.prod.dataservices.mozgcp.netUnknown
cdn.smoot.apple.comUnknown
ocsp2.apple.com.edgekey.netUnknown
gspe1-ssl.ls.apple.comUnknown
crl.microsoft.comMicrosoftMicrosoft
tas02.cwsmu.update.microsoft.comMicrosoftMicrosoft
gsp-ssl.ls.apple.comUnknown
help.v.aaplimg.comUnknown
mesu.g.aaplimg.comUnknown
metricsedge-continent-wrr.v.aaplimg.comUnknown
is-ssl.mzstatic.com.itunes-apple.com.akadns.netUnknown
gsp57-ssl-background.ls.apple.comUnknown
cdp1.digicert.com.akamaized.netUnknown
stocks-data-service.lb-apple.com.akadns.netUnknown
swscan-cdn.apple.com.akadns.netUnknown
configuration.apple.com.edgekey.netUnknown
pkg.github.comGitHubGitHub
eip-terr-na.cdp1.digicert.com.akahost.netUnknown
_http._tcp.azure.archive.ubuntu.comUbuntuUbuntu
_https._tcp.archive.ubuntu.comUbuntuUbuntu
_https._tcp.security.ubuntu.comUbuntuUbuntu
_https._tcp.dl.google.comUnknown
dl.google.comGoogleGoogle
cdp1.digicert.com.akadns.netUnknown
aomedia.googlesource.comUnknown
distfiles.ariadne.spaceUnknown
ftpmirror.gnu.orgUnknown
mirrors.ibiblio.orgUnknown
mirror.cs.odu.eduUnknown
www.php.netUnknown
ftp.gnu.orgUnknown
mirror.team-cymru.comUnknown
mirror.us-midwest-1.nexcess.netUnknown
configuration-lb.ls-apple.com.akadns.netUnknown
cdn.icloud-content.comUnknown
apps-mzstatic-cdn.itunes-apple.com.akadns.netUnknown
cdn-icloud-content.g.aaplimg.comUnknown
mirror.techrich.hkUnknown
ftp.cc.uoc.grUnknown
mirror.dogado.deUnknown
mirror.clientvps.comUnknown
mirrors.nav.roUnknown
ftp.man.poznan.plUnknown
ftp.fau.deUnknown
www.openldap.orgUnknown
mirror.csclub.uwaterloo.caUnknown
mirror.bahnhof.netUnknown
mirrors.dotsrc.orgUnknown
mirror.cyberbits.euUnknown
updates.g.aaplimg.comUnknown
sunsite.icm.edu.plUnknown
ftp.snt.utwente.nlUnknown
mirror.accum.seUnknown
c.apple.news.edgekey.netUnknown
mirror.ufs.ac.zaUnknown
mirror.kumi.systemsUnknown
mirrors.nju.edu.cnUnknown
mirror.ossplanet.netUnknown
mirrors.tuna.tsinghua.edu.cnUnknown
ipcdn.g.aaplimg.comUnknown
mirror.ihost.mdUnknown
ftp.wayne.eduUnknown
weatherkit.apple.com.akadns.netUnknown
mirrors.ocf.berkeley.eduUnknown
mirror.tochlab.netUnknown
safebrowsing.googleapis.comGoogleGoogle
tsfe.trafficshaping.dsp.mp.microsoft.comMicrosoftMicrosoft
4.au.download.windowsupdate.comUnknown
3.au.download.windowsupdate.comUnknown
north-america-mask.wrr.me.apple-dns.netUnknown
swdist.apple.com.edgekey.netUnknown
md-x0d53vdn1hdm.z19.blob.storage.azure.netUnknown
ab-apple-com.v.aaplimg.comUnknown
copilot-proxy.githubusercontent.comGitHubGitHub
ocsp2.apple.com.edgesuite.netUnknown