gpr-docker-publish

Abandoned

machine-learning-apps/gpr-docker-publish · MIT · archived

GitHub Action That Publishes Docker Images to GPR

★ 55 starsLast commit 6 years agoLatest v1.4

/ 100

Security signals

OpenSSF Scorecard2.9 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: machine-learning-apps/gpr-docker-publish@30437ac7b5df4b4837d83548e4c62aac3b100eb9 # v1.4

Mutable tags like v1.4 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: machine-learning-apps/gpr-docker-publish@30437ac7b5df4b4837d83548e4c62aac3b100eb9 # v1.4

Score breakdown

Security (35%)37

Popularity (20%)33

Maintenance (30%)0

Reliability (15%)0