StepSecurity Logo
StepSecurity
LoginStart free
docker/bake-action

docker/bake-action

GitHub Action to use Docker Buildx Bake as a high-level build command

GitHubGitHub Repository

296 stars

Node.js

Node Action

Score updated 3 days ago

GitHub Actions security score

docker/bake-action

Score

7/10

License

Apache License 2.0

Maintained

30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

14 existing vulnerabilities detected

Branch protection

branch protection not enabled on development/release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 1352 open-source projects

Security Policy

security policy file detected

Networking Behavior of docker/bake-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
registry.yarnpkg.comUnknown
proxy.golang.orgGolang ProxyGolang Proxy
storage.googleapis.comGoogleGoogle
ghcr.ioGitHubGitHub
index.docker.ioDockerHubDockerHub
registry.npmjs.orgnpm Registrynpm Registry
repo.yarnpkg.comUnknown
mcr.microsoft.comMicrosoftMicrosoft
gcr.ioUnknown
registry.k8s.ioUnknown
us-east4-docker.pkg.devUnknown
prod-registry-k8s-io-us-east-1.s3.dualstack.us-east-1.amazonaws.comUnknown
eastus.data.mcr.microsoft.comMicrosoftMicrosoft
us-central1-docker.pkg.devUnknown
prod-registry-k8s-io-us-east-2.s3.dualstack.us-east-2.amazonaws.comUnknown
centralus.data.mcr.microsoft.comMicrosoftMicrosoft
westus2.data.mcr.microsoft.comMicrosoftMicrosoft
us-west2-docker.pkg.devUnknown
prod-registry-k8s-io-us-west-1.s3.dualstack.us-west-1.amazonaws.comUnknown
westus.data.mcr.microsoft.comMicrosoftMicrosoft
westcentralus.data.mcr.microsoft.comMicrosoftMicrosoft
github.comGitHubGitHub
us-south1-docker.pkg.devUnknown
raw.githubusercontent.comGitHubGitHub
archive.ubuntu.comUbuntuUbuntu
security.ubuntu.comUbuntuUbuntu
api.papermc.ioUnknown
packages.microsoft.comMicrosoftMicrosoft
us-east5-docker.pkg.devUnknown
deb.debian.orgUnknown
objects.githubusercontent.comGitHubGitHub
apt.llvm.orgUnknown
ports.ubuntu.comUbuntuUbuntu
download.docker.comUnknown
build-cloud.docker.comUnknown
release-assets.githubusercontent.comGitHubGitHub
docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.comDockerHubDockerHub
centralus-2.in.applicationinsights.azure.comAzureAzure
pkg-containers.githubusercontent.comGitHubGitHub
files.pythonhosted.orgPython RegistryPython Registry
pypi.orgPython RegistryPython Registry
static.rust-lang.orgUnknown
us-docker.pkg.devUnknown
sts.googleapis.comGoogleGoogle
ttl.shUnknown
registry.os.wiz.ioUnknown
dhi.ioUnknown
www.githubstatus.comGitHubGitHub
binaries.soliditylang.orgUnknown
sh.rustup.rsUnknown
index.crates.ioUnknown
static.crates.ioUnknown
api.github.comGitHubGitHub
keyserver.ubuntu.comUbuntuUbuntu
repo.mysql.comUnknown
repo.percona.comUnknown
archive.apache.orgUnknown
check.percona.comUnknown
repo.maven.apache.orgUnknown
repository.sonatype.orgUnknown
dl.static-php.devUnknown
static-php-cli.fra1.digitaloceanspaces.comUnknown
go.devUnknown
dl.google.comGoogleGoogle
sum.golang.orgUnknown
pecl.php.netUnknown
download.savannah.nongnu.orgUnknown
mirror.marwan.maUnknown
www.php.netUnknown
www.openldap.orgUnknown
ftp.gnu.orgUnknown
thrysoee.dkUnknown
download.osgeo.orgUnknown
download.gnome.orgUnknown
mirrors.ocf.berkeley.eduUnknown
uploads.github.comGitHubGitHub
mirror.rabisu.comUnknown
builds.dotnet.microsoft.comMicrosoftMicrosoft
nongnu.niranjan.coUnknown
openresty.orgUnknown
cpanmetadb.plackperl.orgUnknown
luarocks.orgUnknown
download.agent.dev.azure.comAzureAzure
azcliprod.blob.core.windows.netUnknown
aka.msUnknown
azcliextensionsync.blob.core.windows.netUnknown
dc.services.visualstudio.comUnknown
get.helm.shUnknown
dl.k8s.ioUnknown
ftp.cc.uoc.grUnknown
packagecloud.ioUnknown
ppa.launchpadcontent.netUnknown
d3fo0g5hm7lbuv.cloudfront.netUnknown
us-west1-docker.pkg.devUnknown
prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.comUnknown
production.cloudfront.docker.comUnknown
fonts.google.comUnknown
api.fontshare.comUnknown
api.fontsource.orgUnknown
fonts.bunny.netUnknown
apk.cgr.devUnknown
9236a389bd48b984df91adc1bc924620.r2.cloudflarestorage.comUnknown
mise.runUnknown
mise.en.devUnknown
mise-versions.jdx.devUnknown
mise-java.jdx.devUnknown
nodejs.orgUnknown
releases.hashicorp.comHashiCorpHashiCorp
tuf-repo-cdn.sigstore.devSigstoreSigstore