ActionRank
Check your actions

repo2docker Action

Stale

jupyterhub/repo2docker-action · MIT

A GitHub action to build data science environment images with repo2docker and push them to registries.

★ 153 starsLast commit 5 months agoLatest 0.2
F
37
/ 100
Security 43Maintenance 28Popularity 46Reliability 30

Security signals

OpenSSF Scorecard3.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: jupyterhub/repo2docker-action@2aa73524ac41f92bd2a4cdf90a7a33f461ea59e5 # 0.2

Mutable tags like 0.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: jupyterhub/repo2docker-action@2aa73524ac41f92bd2a4cdf90a7a33f461ea59e5 # 0.2

Score breakdown

Security (35%)43
Popularity (20%)46
Maintenance (30%)28
Reliability (15%)30