ActionRank
Check your actions

Docker Setup QEMU

Actively maintained

docker/setup-qemu-action · Apache-2.0

GitHub Action to install QEMU static binaries

★ 585 starsLast commit 23 days agoLatest v4.2.0
B
76
/ 100
Security 80Maintenance 100Popularity 48Reliability 58

Security signals

OpenSSF Scorecard8.4 / 10
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0

Mutable tags like v4.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0

Score breakdown

Security (35%)80
Popularity (20%)48
Maintenance (30%)100
Reliability (15%)58