step-security/actions-rs-toolchain

step-security/actions-rs-toolchain

Secure drop-in replacement for actions-rs/toolchain

🛠️ GitHub Action for `rustup` commands.

GitHubGitHub Repository

0 stars

Node.js

Node Action

Maintained by StepSecurity

Score updated 5 days ago

GitHub Actions security score comparison

step-security/actions-rs-toolchainactions-rs/toolchain

Score

8/10

0/10

Pinnable

YesYes

License

MIT LicenseMIT License

Maintained

Maintained by StepSecurityproject is archived

Vulnerabilities

13 existing vulnerabilities detected

93 existing vulnerabilities detected

Branch protection

Branch protection is maximal on development and all release branches

branch protection not enabled on development/release branches

AI analysis

5 Security findings

Manual code review

Upstream changes are reviewed before merging-

Secure publishing

Reproducible builds with SBOM and provenance-

Signed commits

All commits are signed-

Automated security tools

Findings from tools are triaged and fixed before each change-

Popular

Used by StepSecurity enterprise customersUsed by 40192 open-source projects

Security Policy

security policy file detectedsecurity policy file not detected

Networking Behavior of step-security/actions-rs-toolchain

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
static.rust-lang.orgUnknown
xp.apple.comUnknown
api.apple-cloudkit.comUnknown
cf.iadsdk.apple.comUnknown
ocsp.globalsign.comUnknown
dns.msftncsi.comUnknown
device-config.pcms.apple.comUnknown
configuration.apple.comUnknown
itunes.apple.comUnknown
calendars.icloud.comUnknown
h3.apis.apple.map.fastly.netUnknown
swdist.g.aaplimg.comUnknown