{"id":13416525,"url":"https://github.com/fabric8io/docker-maven-plugin","last_synced_at":"2026-10-19T10:19:30.444Z","repository":{"id":15396711,"uuid":"18128548","full_name":"fabric8io/docker-maven-plugin","owner":"fabric8io","description":"Maven plugin for running and creating Docker images","archived":false,"fork":false,"pushed_at":"2026-10-13T03:50:42.000Z","size":23093,"stargazers_count":1931,"open_issues_count":516,"forks_count":651,"subscribers_count":65,"default_branch":"master","last_synced_at":"2026-10-16T21:23:28.680Z","etag":null,"topics":["docker","fabric8","java","maven"],"latest_commit_sha":null,"homepage":"https://dmp.fabric8.io","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fabric8io.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-03-26T06:10:05.000Z","updated_at":"2026-10-13T03:50:47.000Z","dependencies_parsed_at":"2026-08-25T16:13:04.218Z","dependency_job_id":null,"html_url":"https://github.com/fabric8io/docker-maven-plugin","commit_stats":{"total_commits":1977,"total_committers":261,"mean_commits":7.574712643678161,"dds":"0.38492665655032876","last_synced_commit":"b0f105f6d577d13fdb595c60de55afc3a63906b4"},"previous_names":[],"tags_count":417,"template":false,"template_full_name":null,"purl":"pkg:github/fabric8io/docker-maven-plugin","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fabric8io%2Fdocker-maven-plugin","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fabric8io%2Fdocker-maven-plugin/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fabric8io%2Fdocker-maven-plugin/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fabric8io%2Fdocker-maven-plugin/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fabric8io","download_url":"https://codeload.github.com/fabric8io/docker-maven-plugin/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fabric8io%2Fdocker-maven-plugin/sbom","scorecard":{"id":390488,"data":{"date":"2025-08-11","repo":{"name":"github.com/fabric8io/docker-maven-plugin","commit":"e32846c52593c9ff2f6b28b6bd17ac80c80ddfac"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.1,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":4,"reason":"Found 9/22 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: .mvn/wrapper/maven-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/doc-build.yml:9","Warn: no topLevel permission defined: .github/workflows/e2e-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/e2e-windows.yml:1","Warn: no topLevel permission defined: .github/workflows/linux-mavenwrapper-build.yml:1","Warn: no topLevel permission defined: .github/workflows/macos-mavenwrapper-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-snapshots.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/sonar-pr-analysis-publish.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/sonar-pr-request.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/sonar.yml:17","Warn: no topLevel permission defined: .github/workflows/test.yml:1","Warn: no topLevel permission defined: .github/workflows/windows-build.yml:1","Warn: no topLevel permission defined: .github/workflows/windows-mavenwrapper-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release-snapshots.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":10,"reason":"SAST tool detected","details":["Info: SAST configuration detected: Sonar","Warn: 15 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/doc-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-build.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/doc-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-build.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/doc-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/doc-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-windows.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/e2e-windows.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux-mavenwrapper-build.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/linux-mavenwrapper-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux-mavenwrapper-build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/linux-mavenwrapper-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/macos-mavenwrapper-build.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/macos-mavenwrapper-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/macos-mavenwrapper-build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/macos-mavenwrapper-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-snapshots.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/release-snapshots.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-snapshots.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/release-snapshots.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar-pr-analysis-publish.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/sonar-pr-analysis-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar-pr-analysis-publish.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/sonar-pr-analysis-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar-pr-request.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/sonar-pr-request.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar-pr-request.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/sonar-pr-request.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/sonar.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/sonar.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-build.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/windows-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/windows-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-mavenwrapper-build.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/windows-mavenwrapper-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-mavenwrapper-build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/fabric8io/docker-maven-plugin/windows-mavenwrapper-build.yml/master?enable=pin","Warn: containerImage not pinned by hash: it/builder/builder-image/src/main/docker/Dockerfile:1: pin your Docker image by updating alpine to alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: it/buildx-contextdir/Dockerfile:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:849d9d34d5fe0bf88b5fb3d09eb9684909ac4210488b52f4f7bbe683eedcb851","Warn: containerImage not pinned by hash: it/buildx-contextdir/docker/Dockerfile:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:849d9d34d5fe0bf88b5fb3d09eb9684909ac4210488b52f4f7bbe683eedcb851","Warn: containerImage not pinned by hash: it/buildx-contextdir/src/docker/Dockerfile:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:849d9d34d5fe0bf88b5fb3d09eb9684909ac4210488b52f4f7bbe683eedcb851","Warn: containerImage not pinned by hash: it/buildx-dependencyset/Dockerfile:1: pin your Docker image by updating azul/zulu-openjdk-alpine:11 to azul/zulu-openjdk-alpine:11@sha256:c075b938f72fab3735677c25286334727f98f659c813d4ac2d97b937fa5a1231","Warn: containerImage not pinned by hash: it/buildx-dockerfile-secret/src/main/docker/Dockerfile:1: pin your Docker image by updating alpine to alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: it/buildx-dockerfile/src/main/Dockerfile:1: pin your Docker image by updating azul/zulu-openjdk-alpine:11 to azul/zulu-openjdk-alpine:11@sha256:c075b938f72fab3735677c25286334727f98f659c813d4ac2d97b937fa5a1231","Warn: containerImage not pinned by hash: it/buildx-dockerfile_and_contextdir/Dockerfile:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:849d9d34d5fe0bf88b5fb3d09eb9684909ac4210488b52f4f7bbe683eedcb851","Warn: containerImage not pinned by hash: it/buildx-push/Dockerfile:1: pin your Docker image by updating registry.access.redhat.com/ubi8/ubi-minimal:8.6 to registry.access.redhat.com/ubi8/ubi-minimal:8.6@sha256:33931dce809712888d1a8061bfa676963f517daca993984afed3251bc1fb5987","Warn: containerImage not pinned by hash: it/docker-compose-dependon/Postgres.Dockerfile:1: pin your Docker image by updating postgres:16.3-alpine to postgres:16.3-alpine@sha256:36ed71227ae36305d26382657c0b96cbaf298427b3f1eaeb10d77a6dea3eec41","Warn: containerImage not pinned by hash: it/docker-compose/src/main/docker/Dockerfile:1: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: it/docker/Dockerfile:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:849d9d34d5fe0bf88b5fb3d09eb9684909ac4210488b52f4f7bbe683eedcb851","Warn: containerImage not pinned by hash: it/dockerfile-base-as-arg-buildconfig/src/main/docker/Dockerfile:2","Warn: containerImage not pinned by hash: it/dockerfile-base-as-arg/src/main/docker/Dockerfile:3","Warn: containerImage not pinned by hash: it/dockerfile-push-build-arg-from/src/main/docker/Dockerfile:2","Warn: containerImage not pinned by hash: it/dockerfile/src/main/docker/Dockerfile:2","Warn: containerImage not pinned by hash: it/dockerignore/Dockerfile:1: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: it/run-java/Dockerfile:1: pin your Docker image by updating openjdk:jre to openjdk:jre@sha256:d7e920640184803197cace3facdd8364dc0d7727d059bffbe46c009307510166","Warn: containerImage not pinned by hash: it/smallest/Dockerfile:1: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: it/zero-config/Dockerfile:1: pin your Docker image by updating openjdk:jre to openjdk:jre@sha256:d7e920640184803197cace3facdd8364dc0d7727d059bffbe46c009307510166","Warn: containerImage not pinned by hash: samples/build-cache/image/src/main/docker/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/java-debian10 to gcr.io/distroless/java-debian10@sha256:a477273e1eb0e015fd430b452c35bce4f1750915cdc14fa9023f030cba90039a","Warn: containerImage not pinned by hash: samples/data-jolokia/src/main/docker/demo/Dockerfile:1: pin your Docker image by updating consol/tomcat-7.0:latest to consol/tomcat-7.0:latest@sha256:8256b5e8e01fc4f6c1913e1fd70dea95ae656400f70fb1c12157d0e89e1ccaf7","Warn: containerImage not pinned by hash: samples/data-jolokia/src/main/docker/demo/Dockerfile.test:1: pin your Docker image by updating consol/tomcat-8.0:latest to consol/tomcat-8.0:latest@sha256:8107d4c293dd34524e46dd6e62a0370273cf8b8807587acb954f5724e90b6e20","Warn: containerImage not pinned by hash: samples/docker-compose/src/main/docker/Dockerfile:1: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: samples/dockerfile/src/main/docker/Dockerfile:2","Warn: containerImage not pinned by hash: samples/dockerignore/Dockerfile:1: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: samples/run-java/Dockerfile:1: pin your Docker image by updating openjdk:jre to openjdk:jre@sha256:d7e920640184803197cace3facdd8364dc0d7727d059bffbe46c009307510166","Warn: containerImage not pinned by hash: samples/smallest/Dockerfile:1: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: samples/zero-config/Dockerfile:1: pin your Docker image by updating openjdk:jre to openjdk:jre@sha256:d7e920640184803197cace3facdd8364dc0d7727d059bffbe46c009307510166","Warn: downloadThenRun not pinned by hash: .github/workflows/test.yml:29","Info:   0 out of  35 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of  29 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"73 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-78wr-2p64-hpwj","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-cx6h-86xw-9x34","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-cx7f-g6mp-7hqm","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-w3c8-7r8f-9jp8","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-v6w3-2prq-h95f","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-7r82-7xv7-xcpj","Warn: Project is vulnerable to: GHSA-cfh5-3ghh-wfjx","Warn: Project is vulnerable to: GHSA-fmj5-wv96-r2ch","Warn: Project is vulnerable to: GHSA-qg25-hgjv-cg9q","Warn: Project is vulnerable to: GHSA-rcjj-h6gh-jf3r","Warn: Project is vulnerable to: GHSA-xphj-m9cc-8fmq","Warn: Project is vulnerable to: GHSA-gm62-rw4g-vrc4","Warn: Project is vulnerable to: GHSA-3p2h-wqq4-wf4h","Warn: Project is vulnerable to: GHSA-ff77-26x5-69cr"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:40:45.428Z","repository_id":15396711,"created_at":"2025-08-18T17:40:45.428Z","updated_at":"2025-08-18T17:40:45.428Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38354761,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-19T02:00:06.414Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","fabric8","java","maven"],"created_at":"2024-07-30T21:01:00.176Z","updated_at":"2026-10-19T10:19:30.436Z","avatar_url":"https://github.com/fabric8io.png","language":"Java","funding_links":[],"categories":["Development with Docker","maven","Developer Workflow","容器化工具","Projects"],"sub_categories":["API Client"],"readme":"# docker-maven-plugin\n\n[![Maven Central](https://img.shields.io/maven-central/v/io.fabric8/docker-maven-plugin.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/io.fabric8/docker-maven-plugin)\n[![Test](https://github.com/fabric8io/docker-maven-plugin/actions/workflows/test.yml/badge.svg?branch=master)](https://github.com/fabric8io/docker-maven-plugin/actions/workflows/test.yml)\n[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=fabric8io_docker-maven-plugin\u0026metric=coverage)](https://sonarcloud.io/summary/new_code?id=fabric8io_docker-maven-plugin)\n[![Technical Debt](https://sonarcloud.io/api/project_badges/measure?project=fabric8io_docker-maven-plugin\u0026metric=sqale_index)](https://sonarcloud.io/summary/new_code?id=fabric8io_docker-maven-plugin)\n[![Plumber Score](https://score.getplumber.io/github.com/fabric8io/docker-maven-plugin.svg)](https://score.getplumber.io/github.com/fabric8io/docker-maven-plugin)\n\nThis is a Maven plugin for building Docker images and managing containers for integration tests.\nIt works with Maven 3.0.5 and Docker 1.6.0 or later.\n\n#### Goals\n\n| Goal                                                                                            | Description                                      | Default Lifecycle Phase |\n| ----------------------------------------------------------------------------------------------- | ------------------------------------------------ | ----------------------- |\n| [`docker:start`](https://fabric8io.github.io/docker-maven-plugin/#docker:start)                 | Create and start containers                      | pre-integration-test    |\n| [`docker:stop`](https://fabric8io.github.io/docker-maven-plugin/#docker:stop)                   | Stop and destroy containers                      | post-integration-test   |\n| [`docker:build`](https://fabric8io.github.io/docker-maven-plugin/#docker:build)                 | Build images                                     | install                 |\n| [`docker:watch`](https://fabric8io.github.io/docker-maven-plugin/#docker:watch)                 | Watch for doing rebuilds and restarts            |                         |\n| [`docker:push`](https://fabric8io.github.io/docker-maven-plugin/#docker:push)                   | Push images to a registry                        | deploy                  |\n| [`docker:remove`](https://fabric8io.github.io/docker-maven-plugin/#docker:remove)               | Remove images from local docker host             | post-integration-test   |\n| [`docker:logs`](https://fabric8io.github.io/docker-maven-plugin/#docker:logs)                   | Show container logs                              |                         |\n| [`docker:source`](https://fabric8io.github.io/docker-maven-plugin/#docker:source)               | Attach docker build archive to Maven project     | package                 |\n| [`docker:save`](https://fabric8io.github.io/docker-maven-plugin/#docker:save)                   | Save image to a file                             |                         |\n| [`docker:tag`](https://fabric8io.github.io/docker-maven-plugin/#docker:tag)                     | Tag images                                       | install                 |\n| [`docker:volume-create`](https://fabric8io.github.io/docker-maven-plugin/#docker:volume-create) | Create a volume to share data between containers | pre-integration-test    |\n| [`docker:volume-remove`](https://fabric8io.github.io/docker-maven-plugin/#docker:volume-remove) | Remove a created volume                          | post-integration-test   |\n| [`docker:copy`](https://fabric8io.github.io/docker-maven-plugin/#docker:copy)                   | Copy files and directories from a container      | post-integration-test   |\n\n#### Documentation\n\n* The **[User Manual](https://fabric8io.github.io/docker-maven-plugin)** [[PDF](https://fabric8io.github.io/docker-maven-plugin/docker-maven-plugin.pdf)] has a detailed reference for all and everything.\n* The [Introduction](doc/intro.md) is a high-level\n  overview of this plugin's features and provides a usage example.\n  provided goals and possible configuration parameters.\n* [Examples](doc/examples.md) are below `samples/` and contain example\n  setups that you can use as blueprints for your projects.\n* [ChangeLog](doc/changelog.md) has the release history of this plugin.\n* [Contributing](CONTRIBUTING.md) explains how you can contribute to this project. Pull requests are highly appreciated!\n* We publish nightly builds on maven central. Read How to use [Docker Maven Plugin Snapshot artifacts](./doc/HowToUseDockerMavenPluginSnapshotArtifacts.md).\n\n\n#### Docker API Support\n\n* Docker 29+ (**v1.44**) is the minimal required version for compatibility with Docker 29+ daemon\n* Docker 1.6 (**v1.18**) is the minimal required version\n* Docker 1.8.1 (**v1.20**) is required for `docker:watch`\n* Docker 1.9 (**v1.21**) is required for using custom networks and build args.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffabric8io%2Fdocker-maven-plugin","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffabric8io%2Fdocker-maven-plugin","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffabric8io%2Fdocker-maven-plugin/lists"}