Build and publish Docker Images to GitHub Container registry
AbandonedVaultVulp/gp-docker-action · MIT
GitHub Action to build and publish Docker Images to GitHub Container Registry
★ 59 starsLast commit 2 years agoLatest 1.7.0
F
29
/ 100
Security signals
OpenSSF Scorecard1.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: VaultVulp/gp-docker-action@38ebcec449f7d8e81a3e42be7fcfeb840b78e03b # 1.7.0Mutable tags like 1.7.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: VaultVulp/gp-docker-action@38ebcec449f7d8e81a3e42be7fcfeb840b78e03b # 1.7.0
Score breakdown
Security (35%)31
Popularity (20%)32
Maintenance (30%)4
Reliability (15%)70