Publish Docker
Actively maintainedelgohr/Publish-Docker-Github-Action · MIT
A Github Action used to build and publish Docker images
★ 792 starsLast commit 16 days agoLatest v5
C
59
/ 100
Security signals
OpenSSF Scorecard5.2 / 10
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: elgohr/Publish-Docker-Github-Action@1c2f28ccd9476e8a936ac9a1f287405504c93304 # v5Mutable tags like v5 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: elgohr/Publish-Docker-Github-Action@1c2f28ccd9476e8a936ac9a1f287405504c93304 # v5
Score breakdown
Security (35%)61
Popularity (20%)53
Maintenance (30%)60
Reliability (15%)60