Docker Build & Push Action

Actively maintained

mr-smithers-excellent/docker-build-push · MIT

Docker Build & Push GitHub Action

★ 317 starsLast commit 3 days agoLatest v7.0

/ 100

Security signals

OpenSSF Scorecard3.6 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: mr-smithers-excellent/docker-build-push@ef432483bd0252dd948d1d11e60c96a1c93646a9 # v7.0

Mutable tags like v7.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: mr-smithers-excellent/docker-build-push@ef432483bd0252dd948d1d11e60c96a1c93646a9 # v7.0

Score breakdown

Security (35%)42

Popularity (20%)49

Maintenance (30%)99

Reliability (15%)18

Add this badge to your README

ActionRank grade badge for Docker Build & Push Action

Markdown

[![ActionRank](https://actionrank.dev/api/badge/mr-smithers-excellent-docker-build-push)](https://actionrank.dev/actions/mr-smithers-excellent-docker-build-push)

HTML version

HTML

<a href="https://actionrank.dev/actions/mr-smithers-excellent-docker-build-push"><img src="https://actionrank.dev/api/badge/mr-smithers-excellent-docker-build-push" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Docker Build & Push Action

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for Docker Build & Push Action