StepSecurity Logo
StepSecurity
LoginStart free
docker/setup-buildx-action

docker/setup-buildx-action

GitHub Action to set up Docker Buildx

GitHubGitHub Repository

1341 stars

Node.js

Node Action

Maintained action available

Score updated 3 days ago

GitHub Actions security score

docker/setup-buildx-action

Score

8/10

License

Apache License 2.0

Maintained

30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

15 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 36120 open-source projects

Security Policy

security policy file detected

Networking Behavior of docker/setup-buildx-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
raw.githubusercontent.comGitHubGitHub
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
index.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
mirror.netzwerge.deUnknown
pkg-containers.githubusercontent.comGitHubGitHub
docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.comDockerHubDockerHub
hub.docker.comUnknown
build-cloud.docker.comUnknown
release-assets.githubusercontent.comGitHubGitHub
dc.services.visualstudio.comUnknown
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
get.anchore.ioUnknown
proxy.golang.orgGolang ProxyGolang Proxy
sum.golang.orgUnknown
dl.k8s.ioUnknown
cdn.dl.k8s.ioUnknown
storage.googleapis.comGoogleGoogle
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
ghcr.ioGitHubGitHub
gcr.ioUnknown
check.trivy.devUnknown
api.github.comGitHubGitHub
deb.debian.orgUnknown
mise.jdx.devUnknown
docker-images-prod.s3.dualstack.us-east-1.amazonaws.comUnknown
monitoring.us-east-1.amazonaws.comUnknown
ec2messages.us-east-1.amazonaws.comUnknown
download.maxmind.comUnknown
mm-prod-geoip-databases.a2649acb697e2c09b632799562c076f2.r2.cloudflarestorage.comUnknown
updates.maxmind.comUnknown
archive.debian.orgUnknown
mirrors.fedoraproject.orgUnknown
codecs.fedoraproject.orgUnknown
ftp-nyc.osuosl.orgUnknown
nocix.mm.fcix.netUnknown
ftp2.osuosl.orgUnknown
paducahix.mm.fcix.netUnknown
ftp-osl.osuosl.orgUnknown
mirror.us.mirhosting.netUnknown
http.kali.orgUnknown
kali.downloadUnknown
mirrors.ocf.berkeley.eduUnknown
kali.darklab.shUnknown
us.mirror.ionos.comUnknown
cdn.amazonlinux.comUnknown
packages.microsoft.comMicrosoftMicrosoft
prod.app-api.stepsecurity.ioUnknown
sts.googleapis.comGoogleGoogle
gha-nexus-dockerpush.shared.orcid.orgUnknown
download.java.netUnknown
mc-repo.googlecode.comUnknown
repo.maven.apache.orgUnknown
download.newrelic.comUnknown
archive.ubuntu.comUbuntuUbuntu
security.ubuntu.comUbuntuUbuntu
tuf-repo-cdn.sigstore.devSigstoreSigstore
repo1.maven.orgUnknown
maven.restlet.talend.comUnknown
jcenter.bintray.comUnknown
us-docker.pkg.devUnknown
registry.npmjs.orgnpm Registrynpm Registry
database.clamav.netUnknown
mirrors.rc.rit.eduUnknown
gigsouth.mm.fcix.netUnknown
ix-denver.mm.fcix.netUnknown
production.cloudfront.docker.comUnknown
binaries.soliditylang.orgUnknown
lj4nrw2za9qbpvojfxjbyahh.blob.core.windows.netUnknown
sh.rustup.rsUnknown
static.rust-lang.orgUnknown
index.crates.ioUnknown
static.crates.ioUnknown
ttl.shUnknown
ppa.launchpadcontent.netUnknown
packagecloud.ioUnknown
download.docker.comUnknown
d3fo0g5hm7lbuv.cloudfront.netUnknown
unofficial-builds.nodejs.orgUnknown
apk.cgr.devUnknown
pypi.orgPython RegistryPython Registry
files.pythonhosted.orgPython RegistryPython Registry
9236a389bd48b984df91adc1bc924620.r2.cloudflarestorage.comUnknown
dhi.ioUnknown
cofractal-sea.mm.fcix.netUnknown
coresite-atl.mm.fcix.netUnknown
nnenix.mm.fcix.netUnknown
mirror.fcix.netUnknown
www.clamav.netUnknown
clamav-site.s3.amazonaws.comUnknown