Hello, World!
Staleactions/hello-world-docker-action · MIT
A template to demonstrate how to build a Docker action.
★ 181 starsLast commit 5 months agoLatest v2
D
43
/ 100
Security signals
OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: actions/hello-world-docker-action@0b406c0e14ed4b1853113f84b89aa6cdf762e340 # v2Mutable tags like v2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: actions/hello-world-docker-action@0b406c0e14ed4b1853113f84b89aa6cdf762e340 # v2
Score breakdown
Security (35%)50
Popularity (20%)39
Maintenance (30%)28
Reliability (15%)60