ActionRank
Check your actions

Docker Setup Docker

Actively maintained

docker/setup-docker-action · Apache-2.0

GitHub Action to set up (download and install) Docker CE

★ 78 starsLast commit 10 days agoLatest v5.4.0
B
73
/ 100
Security 75Maintenance 100Popularity 39Reliability 58

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: docker/setup-docker-action@77e84dbf09b47d1e29270283c22f16145aa85ca1 # v5.4.0

Mutable tags like v5.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: docker/setup-docker-action@77e84dbf09b47d1e29270283c22f16145aa85ca1 # v5.4.0

Score breakdown

Security (35%)75
Popularity (20%)39
Maintenance (30%)100
Reliability (15%)58