StepSecurity Logo
StepSecurity
LoginStart free
docker/setup-buildx-action

docker/setup-buildx-action

GitHub Action to set up Docker Buildx

GitHubGitHub Repository

1382 stars

Node.js

Node Action

Maintained action available

Score updated 1 day ago

GitHub Actions security score

docker/setup-buildx-action

Score

8/10

Pinnable

Yes

License

Apache License 2.0

Maintained

30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

33 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

AI analysis

2 Security findings

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 307200 open-source projects

Security Policy

security policy file detected

Networking Behavior of docker/setup-buildx-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
raw.githubusercontent.comGitHubGitHub
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
index.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
mirror.netzwerge.deUnknown
pkg-containers.githubusercontent.comGitHubGitHub
docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.comDockerHubDockerHub
hub.docker.comUnknown
build-cloud.docker.comUnknown
release-assets.githubusercontent.comGitHubGitHub
dc.services.visualstudio.comUnknown
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
get.anchore.ioUnknown
proxy.golang.orgGolang ProxyGolang Proxy
sum.golang.orgUnknown
dl.k8s.ioUnknown
cdn.dl.k8s.ioUnknown
storage.googleapis.comGoogleGoogle
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
ghcr.ioGitHubGitHub
gcr.ioUnknown
check.trivy.devUnknown
api.github.comGitHubGitHub
deb.debian.orgUnknown
mise.jdx.devUnknown
docker-images-prod.s3.dualstack.us-east-1.amazonaws.comUnknown
monitoring.us-east-1.amazonaws.comUnknown
ec2messages.us-east-1.amazonaws.comUnknown
download.maxmind.comUnknown
mm-prod-geoip-databases.a2649acb697e2c09b632799562c076f2.r2.cloudflarestorage.comUnknown
updates.maxmind.comUnknown
archive.debian.orgUnknown
mirrors.fedoraproject.orgUnknown
codecs.fedoraproject.orgUnknown
ftp-nyc.osuosl.orgUnknown
nocix.mm.fcix.netUnknown
ftp2.osuosl.orgUnknown
paducahix.mm.fcix.netUnknown
ftp-osl.osuosl.orgUnknown
mirror.us.mirhosting.netUnknown
http.kali.orgUnknown
kali.downloadUnknown
mirrors.ocf.berkeley.eduUnknown
kali.darklab.shUnknown
us.mirror.ionos.comUnknown
cdn.amazonlinux.comUnknown
packages.microsoft.comMicrosoftMicrosoft
sts.googleapis.comGoogleGoogle
gha-nexus-dockerpush.shared.orcid.orgUnknown
download.java.netUnknown
mc-repo.googlecode.comUnknown
repo.maven.apache.orgUnknown
download.newrelic.comUnknown
archive.ubuntu.comUbuntuUbuntu
security.ubuntu.comUbuntuUbuntu
tuf-repo-cdn.sigstore.devSigstoreSigstore
repo1.maven.orgUnknown
maven.restlet.talend.comUnknown
jcenter.bintray.comUnknown
us-docker.pkg.devUnknown
registry.npmjs.orgnpm Registrynpm Registry
database.clamav.netUnknown
mirrors.rc.rit.eduUnknown
gigsouth.mm.fcix.netUnknown
ix-denver.mm.fcix.netUnknown
production.cloudfront.docker.comUnknown
binaries.soliditylang.orgUnknown
lj4nrw2za9qbpvojfxjbyahh.blob.core.windows.netUnknown
sh.rustup.rsUnknown
static.rust-lang.orgUnknown
index.crates.ioUnknown
static.crates.ioUnknown
ttl.shUnknown
ppa.launchpadcontent.netUnknown
packagecloud.ioUnknown
download.docker.comUnknown
d3fo0g5hm7lbuv.cloudfront.netUnknown
unofficial-builds.nodejs.orgUnknown
apk.cgr.devUnknown
pypi.orgPython RegistryPython Registry
files.pythonhosted.orgPython RegistryPython Registry
9236a389bd48b984df91adc1bc924620.r2.cloudflarestorage.comUnknown
dhi.ioUnknown
cofractal-sea.mm.fcix.netUnknown
coresite-atl.mm.fcix.netUnknown
nnenix.mm.fcix.netUnknown
mirror.fcix.netUnknown
www.clamav.netUnknown
clamav-site.s3.amazonaws.comUnknown
fulcio.sigstore.devSigstoreSigstore
mise.en.devUnknown
otlp-gateway-prod-gb-south-1.grafana.netUnknown
dl.google.comGoogleGoogle
azure.archive.ubuntu.comUbuntuUbuntu
esm.ubuntu.comUbuntuUbuntu
registry.k8s.ioUnknown
ssm.us-east-1.amazonaws.comUnknown
semgrep.devUnknown
releases.hashicorp.comHashiCorpHashiCorp
crates.ioUnknown
mirror.gcr.ioUnknown
warpbuild-prod-runner-telemetry.s3.us-east-1.amazonaws.comUnknown
index.rubygems.orgRubyGemsRubyGems
rubygems.orgRubyGemsRubyGems
download.qt.ioUnknown
qt.mirror.constant.comUnknown
mirrors.ubuntu.comUbuntuUbuntu
wiki.aswf.ioUnknown
download.sonatype.comUnknown
hyperledger.jfrog.ioUnknown
releases.astral.shUnknown
o-ran-sc.1password.comUnknown
www.linuxfoundation.orgUnknown
logs.eu-central-1.amazonaws.comUnknown
wiki.opendaylight.orgUnknown
logs.o-ran-sc.orgUnknown
logs.onap.orgUnknown
git.fd.ioUnknown
wiki.fd.ioUnknown
logs.edgexfoundry.orgUnknown
wiki.akraino.orgUnknown
endoflife.dateUnknown
build.automotivelinux.orgUnknown
aswf.jfrog.ioUnknown
wiki.openmainframeproject.orgUnknown
jira.opnfv.orgUnknown
sonarcloud.ioSonarSonar
grype.anchore.ioUnknown
oss-fuzz-build-logs.storage.googleapis.comGoogleGoogle
analysis-sensorcache-eu-central-1-prod.s3.amazonaws.comSonarSonar
api.adoptium.netUnknown
nexus3.opendaylight.orgUnknown
upload.pypi.orgPython RegistryPython Registry
cache.agilebits.comUnknown
wiki.automotivelinux.orgUnknown
linuxfoundation.1password.comUnknown
get.helm.shUnknown
git.automotivelinux.orgUnknown
ec2messages.eu-central-1.amazonaws.comUnknown
us-west1-docker.pkg.devUnknown
registry.yarnpkg.comUnknown
rekor.sigstore.devSigstoreSigstore
logs.us-east-1.amazonaws.comUnknown
fastly.mirror.pkgbuild.comUnknown
prod-us-east-1-starport-layer-bucket.s3.us-east-1.amazonaws.comUnknown
116854521076.dkr.ecr.us-east-1.amazonaws.comUnknown