ActionRank
Check your actions

Docker Setup Buildx

Actively maintained

docker/setup-buildx-action · Apache-2.0

GitHub Action to set up Docker Buildx

★ 1.4k starsLast commit 23 days agoLatest v4.2.0
B
79
/ 100
Security 82Maintenance 100Popularity 56Reliability 58

Security signals

OpenSSF Scorecard8.6 / 10
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

Mutable tags like v4.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

Score breakdown

Security (35%)82
Popularity (20%)56
Maintenance (30%)100
Reliability (15%)58