Docker Buildx Bake

Actively maintained

docker/bake-action · Apache-2.0

GitHub Action to use Docker Buildx Bake as a high-level build command

★ 298 starsLast commit 23 days agoLatest v7.3.0

/ 100

Security signals

OpenSSF Scorecard8.5 / 10

SECURITY.md presentNo

Immutable releasesEnabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0

Mutable tags like v7.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0

Score breakdown

Security (35%)81

Popularity (20%)48

Maintenance (30%)100

Reliability (15%)58