Docker Login

Actively maintained

docker/login-action · Apache-2.0

GitHub Action to login against a Docker registry

★ 1.5k starsLast commit 3 days agoLatest v4.6.0

/ 100

Security signals

OpenSSF Scorecard8.6 / 10

SECURITY.md presentNo

Immutable releasesEnabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0

Mutable tags like v4.6.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0

Score breakdown

Security (35%)82

Popularity (20%)57

Maintenance (30%)100

Reliability (15%)58