step-security/rust-cache

step-security/rust-cache

Secure drop-in replacement for Swatinem/rust-cache

A GitHub Action that implements smart caching for rust/cargo projects.

GitHubGitHub Repository

0 stars

Node.js

Node Action

Maintained by StepSecurity

Score updated 4 days ago

GitHub Actions security score comparison

step-security/rust-cacheSwatinem/rust-cache

Score

9/10

0/10

License

GNU Lesser General Public License v3.0

Maintained

Maintained by StepSecurity

Vulnerabilities

3 existing vulnerabilities detected

Branch protection

Branch protection is maximal on development and all release branches

Manual code review

Upstream changes are reviewed before merging-

Secure publishing

Reproducible builds with SBOM and provenance-

Signed commits

All commits are signed-

Automated security tools

Findings from tools are triaged and fixed before each change-

Popular

Used by StepSecurity enterprise customersUsed by 9360 open-source projects

Security Policy

security policy file detectedsecurity policy file not detected

Networking Behavior of step-security/rust-cache

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
static.rust-lang.orgUnknown
static.crates.ioUnknown
updates.cdn-apple.comUnknown
configuration.apple.comUnknown
ocsp.digicert.comUnknown
bag.itunes.apple.comUnknown
pancake.apple.comUnknown
xp.apple.comUnknown
swscan.apple.comUnknown
mesu.apple.comUnknown
configuration.ls.apple.comUnknown
swallow.apple.comUnknown
ocsp2.apple.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
configuration-lb.ls-apple.com.akadns.netUnknown
news-edge.apple.comUnknown
crates.ioUnknown
fbs.smoot.apple.comUnknown
mask-api.icloud.comUnknown
device-config.pcms.apple.comUnknown
index.crates.ioUnknown
gateway.icloud.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
dns.msftncsi.comUnknown
init.itunes.apple.comUnknown
valid.apple.comUnknown
experiments.apple.comUnknown
apps.mzstatic.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
assets-mercury.mzstatic.comUnknown
cds.apple.comUnknown
amp-api.media.apple.comUnknown
help.apple.comUnknown
configuration.apple.com.akadns.netUnknown
swdist.apple.comUnknown
calendars.icloud.comUnknown
ipcdn.apple.comUnknown
ocsp.usertrust.comUnknown
gdmf.apple.comUnknown
weatherkit.apple.comUnknown
0.pool.ntp.orgUnknown
metrics.icloud.comUnknown
ocsp2.g.aaplimg.comUnknown
xp.v.aaplimg.comUnknown