ActionRank
Check your actions

Build and push Docker images

Actively maintained

docker/build-push-action · Apache-2.0

GitHub Action to build and push Docker images with Buildx

★ 5.4k starsLast commit 23 days agoLatest v7.3.0
B
79
/ 100
Security 76Maintenance 100Popularity 70Reliability 58

Security signals

OpenSSF Scorecard7.6 / 10
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0

Mutable tags like v7.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0

Score breakdown

Security (35%)76
Popularity (20%)70
Maintenance (30%)100
Reliability (15%)58