ActionRank
Check your actions

setup-docker

Stale

docker-practice/actions-setup-docker

Set up your GitHub Actions workflow with a specific version(18.09,19.03,20.10,nightly) of Docker ON Linux/macOS

★ 100 starsLast commit 11 months agoLatest 1.0.12
F
38
/ 100
Security 33Maintenance 17Popularity 33Reliability 96

Security signals

OpenSSF Scorecard2.2 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: docker-practice/actions-setup-docker@fd7ecdac7caf8e2c541a48c9bcc280aae59a8461 # 1.0.12

Mutable tags like 1.0.12 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: docker-practice/actions-setup-docker@fd7ecdac7caf8e2c541a48c9bcc280aae59a8461 # 1.0.12

Score breakdown

Security (35%)33
Popularity (20%)33
Maintenance (30%)17
Reliability (15%)96