Push to GCR GitHub Action
StaleRafikFarhad/push-to-gcr-github-action · MIT
An action that build docker image and push to Google Cloud Registry and Google Artifact Registry.
★ 75 starsLast commit 5 months agoLatest v5
D
48
/ 100
Security signals
OpenSSF Scorecard3.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: RafikFarhad/push-to-gcr-github-action@e6fd4fb5c4b92fb4cfe55900729ec9edfe9506ab # v5Mutable tags like v5 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: RafikFarhad/push-to-gcr-github-action@e6fd4fb5c4b92fb4cfe55900729ec9edfe9506ab # v5
Score breakdown
Security (35%)43
Popularity (20%)38
Maintenance (30%)52
Reliability (15%)68