Dokku

Actively maintained

dokku/github-action · MIT

★ 195 starsLast commit 1 months agoLatest v1.10.0

/ 100

Security signals

OpenSSF Scorecard5.3 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: dokku/github-action@cc7dec1d2b9fed249a14ae462bc953bba436f78c # v1.10.0

Mutable tags like v1.10.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: dokku/github-action@cc7dec1d2b9fed249a14ae462bc953bba436f78c # v1.10.0

Score breakdown

Security (35%)52

Popularity (20%)41

Maintenance (30%)79

Reliability (15%)70