ActionRank
Check your actions

Inject/Extract Cache

Actively maintained

reproducible-containers/buildkit-cache-dance · Apache-2.0

Save `RUN --mount=type=cache` caches on GitHub Actions ( Forked from https://github.com/overmindtech/buildkit-cache-dance )

★ 330 starsLast commit 2 months agoLatest v3.4.0
C
60
/ 100
Security 50Maintenance 73Popularity 50Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: reproducible-containers/buildkit-cache-dance@5422eac04292c961a382e0f584ea0f03ad9da723 # v3.4.0

Mutable tags like v3.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: reproducible-containers/buildkit-cache-dance@5422eac04292c961a382e0f584ea0f03ad9da723 # v3.4.0

Score breakdown

Security (35%)50
Popularity (20%)50
Maintenance (30%)73
Reliability (15%)70