starred/act

Fork 0

mirror of https://github.com/nektos/act.git synced 2026-04-26 17:35:49 +03:00

[GH-ISSUE #6004] No Phone Home! #1315

New issue

Open

opened 2026-03-01 21:50:19 +03:00 by kerem · 3 comments

kerem commented

2026-03-01 21:50:19 +03:00

Owner

Originally created by @oojacoboo on GitHub (Feb 11, 2026).
Original GitHub issue: https://github.com/nektos/act/issues/6004

Guys, we have package managers for checking versions. Is this really necessary? It's certainly not a great look having to dig into a repo to find out if it's doing any funny business.

Originally created by @oojacoboo on GitHub (Feb 11, 2026). Original GitHub issue: https://github.com/nektos/act/issues/6004 Guys, we have package managers for checking versions. Is this really necessary? It's certainly not a great look having to dig into a repo to find out if it's doing any funny business. <img width="703" height="485" alt="Image" src="https://github.com/user-attachments/assets/48f9d216-fe51-4827-b226-2959557277d8" />

kerem commented

2026-03-01 21:50:19 +03:00

Author

Owner

@codeafridi commented on GitHub (Feb 15, 2026):

is this real secutrity issue or just network protocols doing its work?

@codeafridi commented on GitHub (Feb 15, 2026): is this real secutrity issue or just network protocols doing its work?

kerem commented

2026-03-01 21:50:19 +03:00

Author

Owner

@oojacoboo commented on GitHub (Feb 15, 2026):

It's not network protocols doing it's work.... whatever that means. It's act sending API requests from your computer to their API server to report the version you're using and any system details. It's not necessary. There isn't any concern at the moment, as it's not sending any other information. But for an open-source lib, it's non-standard and a tad concerning that it was even considered a good idea.

@oojacoboo commented on GitHub (Feb 15, 2026): It's not network protocols doing it's work.... whatever that means. It's `act` sending API requests from your computer to their API server to report the version you're using and any system details. It's not necessary. There isn't any concern at the moment, as it's not sending any other information. But for an open-source lib, it's non-standard and a tad concerning that it was even considered a good idea.

kerem commented

2026-03-01 21:50:19 +03:00

Author

Owner

@ChristopherHX commented on GitHub (Feb 16, 2026):

Act as an "open-source lib" does not do that, this is part of package cmd used by the cli entrypoint. (Yes you called this project a library and not an "open-source executable")

I remember that windows defender flagging an act cli update that started creating an folder just by starting it with --help etc, somehow this defender warning/error in winget disappeared a week later and got released

No I don't control the domain, No I don't have access to any data collected by it, Yes my own version of act cli tool does not call this endpoint anymore

I might be biased due to approving this change years ago (have 100+ PRs merged here), my focus moved to my own version of the act cli tool that is currently at version v0.4.1 (soon v0.5.0) opposed to v0.2.x

@ChristopherHX commented on GitHub (Feb 16, 2026): Act as an "open-source lib" does not do that, this is part of package cmd used by the cli entrypoint. (Yes you called this project a library and not an "open-source executable") _I remember that windows defender flagging an act cli update that started creating an folder just by starting it with `--help` etc, somehow this defender warning/error in winget disappeared a week later and got released_ _No I don't control the domain, No I don't have access to any data collected by it, Yes my own version of act cli tool does not call this endpoint anymore_ _I might be biased due to approving this change years ago (have 100+ PRs merged here), my focus moved to my own version of the act cli tool that is currently at version v0.4.1 (soon v0.5.0) opposed to v0.2.x_

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/act#1315

No description provided.

Rows
Columns