{"date":"2026-08-24","repo":{"name":"github.com/airbytehq/airbyte","commit":"ea1472ff0f850b9cf2cf87473ead8d65f5b57a45"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":4.5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Code-Review","score":7,"reason":"Found 7/10 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout '${{ github.event.workflow_run.head_sha }}': .github/workflows/notify-on-replication-version-change.yml:23"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Branch-Protection","score":4,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Warn: 'stale review dismissal' is disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Warn: 'last push approval' is disabled on branch 'master'","Warn: 'up-to-date branches' is disabled on branch 'master'","Info: status check found to merge onto on branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/agent-sdk-docs-generate.yml:34","Info: found token with 'none' permissions: .github/workflows/auto-merge-labels.yml:1","Info: found token with 'none' permissions: .github/workflows/auto-merge-toggle.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/autopilot-release-immediately-checkbox.yml:24","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/autopilot-release-immediately-checkbox.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:42","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/codeql.yml:43","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:100","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:99","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:141","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:142","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:167","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:168","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:193","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:194","Info: jobLevel 'contents' permission set to 'read': .github/workflows/community-pr-permissions-check.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/connectors-up-to-date.yml:172","Info: jobLevel 'actions' permission set to 'read': .github/workflows/connectors-up-to-date.yml:173","Info: jobLevel 'contents' permission set to 'read': .github/workflows/enforce-draft-pr-status.yml:35","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/pyairbyte-docs-generate.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/welcome-message.yml:25","Warn: no topLevel permission defined: .github/workflows/agent-sdk-docs-generate.yml:1","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ai-canary-prerelease-command.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-canary-prerelease-command.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-create-docs-pr-command.yml:24","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ai-create-docs-pr-command.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-dev-command.yml:46","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ai-dev-command.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-docs-review-command.yml:53","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-prove-fix-command.yml:24","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ai-prove-fix-command.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-ready-command.yml:37","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ai-ready-command.yml:39","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-release-watch-command.yml:24","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ai-release-watch-command.yml:26","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ai-resolve-conflicts-command.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-resolve-conflicts-command.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/ai-review-command.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/auto-ai-review-label.yml:16","Info: found token with 'none' permissions: .github/workflows/auto-merge-cron.yml:1","Info: found token with 'none' permissions: .github/workflows/auto-merge-labels.yml:1","Info: found token with 'none' permissions: .github/workflows/auto-merge-toggle.yml:1","Warn: no topLevel permission defined: .github/workflows/auto-upgrade-certified-connectors-cdk.yml:1","Warn: no topLevel permission defined: .github/workflows/autodoc.yml:1","Info: found token with 'none' permissions: .github/workflows/autopilot-release-immediately-checkbox.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/autopilot-rollout-suggestion.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/backfill-issues-by-connector.yml:35","Info: topLevel 'contents' permission set to 'read': .github/workflows/block-release-check.yml:20","Warn: topLevel 'contents' permission set to 'write': .github/workflows/block-release.yml:43","Warn: no topLevel permission defined: .github/workflows/build-connector-images-command.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/bump-progressive-rollout-version-command.yml:30","Info: topLevel 'contents' permission set to 'read': .github/workflows/bump-version-command.yml:60","Warn: no topLevel permission defined: .github/workflows/cdk-destination-connector-compatibility-test.yml:1","Warn: no topLevel permission defined: .github/workflows/cdk-source-connector-compatibility-test.yml:1","Warn: no topLevel permission defined: .github/workflows/changelog_update_check.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: found token with 'none' permissions: .github/workflows/community-api-source-pr-board.yml:1","Warn: no topLevel permission defined: .github/workflows/community-pr-permissions-check.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/connector-active-progressive-rollout-checks.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/connector-ci-checks.yml:42","Warn: topLevel 'checks' permission set to 'write': .github/workflows/connector-ci-checks.yml:43","Warn: topLevel 'actions' permission set to 'write': .github/workflows/connector-image-build.yml:32","Warn: topLevel 'checks' permission set to 'write': .github/workflows/connector-image-build.yml:33","Warn: topLevel 'packages' permission set to 'write': .github/workflows/connector-image-build.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/connector-image-build.yml:30","Warn: no topLevel permission defined: .github/workflows/connectors-cdk-version-check.yml:1","Warn: no topLevel permission defined: .github/workflows/connectors-up-to-date.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/daily-release-notes.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-connector-base-image-tests.yml:21","Warn: topLevel 'packages' permission set to 'write': .github/workflows/docker-connector-base-image-tests.yml:22","Warn: no topLevel permission defined: .github/workflows/docker-connector-image-publishing.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-image-pruning.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-build.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/docs-vercel-production-rebuild.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/enable-autopilot-rollouts-command.yml:33","Warn: no topLevel permission defined: .github/workflows/enforce-draft-pr-status.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/finalize_rollout.yml:28","Info: topLevel 'contents' permission set to 'read': .github/workflows/force-merge-command.yml:31","Warn: no topLevel permission defined: .github/workflows/format-fix-command.yml:1","Warn: no topLevel permission defined: .github/workflows/format_check.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/generate-connector-registries.yml:60","Warn: no topLevel permission defined: .github/workflows/gradle-dependency-diff.yml:1","Info: found token with 'none' permissions: .github/workflows/hydra-automerge.yml:1","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/hydra-failure-command.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/hydra-failure-command.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/java-bulk-cdk-base-publish.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/java-bulk-cdk-extract-publish.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/java-bulk-cdk-load-publish.yml:15","Warn: no topLevel permission defined: .github/workflows/java-cdk-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/jvm-connector-pr-structure.yml:1","Warn: no topLevel permission defined: .github/workflows/kotlin-bulk-cdk-dokka-publish.yml:1","Warn: no topLevel permission defined: .github/workflows/label-community-prs.yml:1","Warn: no topLevel permission defined: .github/workflows/label-github-issues-by-context.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/label-issues-by-connector.yml:8","Warn: no topLevel permission defined: .github/workflows/label-prs-by-context.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/notify-on-replication-version-change.yml:10","Info: topLevel 'actions' permission set to 'read': .github/workflows/notify-on-replication-version-change.yml:11","Warn: topLevel 'contents' permission set to 'write': .github/workflows/poe-command.yml:35","Info: topLevel 'contents' permission set to 'read': .github/workflows/pr-ai-review-submit.yml:10","Warn: no topLevel permission defined: .github/workflows/publish-connectors-prerelease-command.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-java-cdk-command.yml:1","Warn: no topLevel permission defined: .github/workflows/publish_connectors.yml:1","Warn: no topLevel permission defined: .github/workflows/pyairbyte-docs-generate.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/regenerate-agent-engine-api-spec.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/resolve-stale-metadata.yml:14","Warn: no topLevel permission defined: .github/workflows/reviewdog.yml:1","Warn: no topLevel permission defined: .github/workflows/run-connector-tests-command.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/semantic-pr-check.yml:24","Warn: no topLevel permission defined: .github/workflows/slash-commands.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/stale-autogen-docs-prs.yml:13","Warn: no topLevel permission defined: .github/workflows/stale-community-issues.yaml:1","Warn: no topLevel permission defined: .github/workflows/stale-discussions-autoclose.yml:1","Warn: no topLevel permission defined: .github/workflows/stale-routed-issues.yaml:1","Warn: no topLevel permission defined: .github/workflows/sync-ai-connector-docs.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/tk-todo-check.yml:10","Warn: no topLevel permission defined: .github/workflows/update-connector-cdk-version-command.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/version-yank-command.yml:53","Warn: no topLevel permission defined: .github/workflows/welcome-message.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-connector-base-image-tests.yml:50"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: airbyte-integrations/connectors/destination-databend/destination_databend/__init__.pyc:1","Warn: binary detected: airbyte-integrations/connectors/destination-rabbitmq/destination_rabbitmq/__init__.pyc:1","Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Info: Possibly incomplete results: error parsing shell code: reached \" without matching (( with )): airbyte-cdk/java/airbyte-cdk/dependencies/src/testFixtures/resources/entrypoints/sync/main.sh:0","Info: Possibly incomplete results: error parsing shell code: reached EOF without closing quote \": .github/workflows/hydra-automerge.yml:872","Info: Possibly incomplete results: error parsing shell code: reached EOF without closing quote \": .github/workflows/hydra-automerge.yml:876","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-canary-prerelease-command.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-canary-prerelease-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-canary-prerelease-command.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-canary-prerelease-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-canary-prerelease-command.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-canary-prerelease-command.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-create-docs-pr-command.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-create-docs-pr-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-create-docs-pr-command.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-create-docs-pr-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-create-docs-pr-command.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-create-docs-pr-command.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-dev-command.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-dev-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-dev-command.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-dev-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-dev-command.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-dev-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-docs-review-command.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-docs-review-command.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-prove-fix-command.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-prove-fix-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-prove-fix-command.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-prove-fix-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-prove-fix-command.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-prove-fix-command.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-release-watch-command.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-release-watch-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-release-watch-command.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-release-watch-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-release-watch-command.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-release-watch-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-resolve-conflicts-command.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-resolve-conflicts-command.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-command.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-review-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-command.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-review-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-command.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/ai-review-command.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-merge-cron.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/auto-merge-cron.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-merge-cron.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/auto-merge-cron.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-merge-cron.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/auto-merge-cron.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/autodoc.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/autodoc.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/daily-release-notes.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/daily-release-notes.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/daily-release-notes.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/daily-release-notes.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hydra-automerge.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/hydra-automerge.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hydra-automerge.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/hydra-automerge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hydra-automerge.yml:329: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/hydra-automerge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hydra-failure-command.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/hydra-failure-command.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/kotlin-bulk-cdk-dokka-publish.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/kotlin-bulk-cdk-dokka-publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/kotlin-bulk-cdk-dokka-publish.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/kotlin-bulk-cdk-dokka-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kotlin-bulk-cdk-dokka-publish.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/kotlin-bulk-cdk-dokka-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kotlin-bulk-cdk-dokka-publish.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/kotlin-bulk-cdk-dokka-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kotlin-bulk-cdk-dokka-publish.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/kotlin-bulk-cdk-dokka-publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-issue-triage.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/oss-issue-triage.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/oss-issue-triage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-ai-review-submit.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/pr-ai-review-submit.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/semantic-pr-check.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/semantic-pr-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semantic-pr-check.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/semantic-pr-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-ai-connector-docs.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/sync-ai-connector-docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tk-todo-check.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/airbytehq/airbyte/tk-todo-check.yml/master?enable=pin","Warn: containerImage not pinned by hash: airbyte-cdk/bulk/core/base/src/testFixtures/resources/bastion/Dockerfile:1: pin your Docker image by updating linuxkit/sshd:v1.0.0 to linuxkit/sshd:v1.0.0@sha256:fd24e855b87e77e1c66680080dad6c6f096bb712f03f2d47e4defa0c9e7ab5bc","Warn: containerImage not pinned by hash: airbyte-cdk/java/airbyte-cdk/core/src/main/resources/bastion/Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-java/Dockerfile:10: pin your Docker image by updating amazoncorretto:17.0.8 to amazoncorretto:17.0.8@sha256:902e40b2dcd7ce1d08d8e67caef4435afec1d5a0f1cb66cdcb8d84eada807f0a","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/Dockerfile:1: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/clickhouse.Dockerfile:1: pin your Docker image by updating ghcr.io/dbt-labs/dbt-core:1.3.1 to ghcr.io/dbt-labs/dbt-core:1.3.1@sha256:94e7895f81398b4f38ff11be963b7936420d67adeb5de21d576bae2692561cd3","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/dbt.Dockerfile:3: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/duckdb.Dockerfile:1: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/mssql.Dockerfile:1: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/mysql.Dockerfile:1: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/oracle.Dockerfile:5: pin your Docker image by updating fishtownanalytics/dbt:0.19.1 to fishtownanalytics/dbt:0.19.1@sha256:396c1c78660348cd99df304e2cbd6eb46eb6fffdb262ddfd1fe34ee8f9f70c48","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/redshift.Dockerfile:1: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/snowflake.Dockerfile:1: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base-normalization/tidb.Dockerfile:1: pin your Docker image by updating fishtownanalytics/dbt:1.0.0 to fishtownanalytics/dbt:1.0.0@sha256:4c9462867d2db6869a048ba429d3557a562ac20337d4ce25b634c0e026954028","Warn: containerImage not pinned by hash: airbyte-integrations/bases/base/Dockerfile:9: pin your Docker image by updating amazonlinux:2022.0.20220831.1 to amazonlinux:2022.0.20220831.1@sha256:d26e31b5b4bb811a12cb868453a980a9ae53338020130521b67068cec9cabcc8","Warn: containerImage not pinned by hash: airbyte-integrations/connectors/source-clickhouse/src/test-integration/resources/docker/Dockerfile:1: pin your Docker image by updating clickhouse/clickhouse-server:22.5 to clickhouse/clickhouse-server:22.5@sha256:a171c7df7ef48ce75eefb9e1eff5ae7ce4934f3e4f44963655344f074e582f6f","Warn: containerImage not pinned by hash: airbyte-integrations/connectors/source-mysql/integration_tests/Dockerfile:2: pin your Docker image by updating python:3.9 to python:3.9@sha256:da5aee29682d12a6649f51c8d6f15b87deb3e6c524b923c41d0cb3304d07c913","Warn: containerImage not pinned by hash: airbyte-integrations/connectors/source-python-http-tutorial/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:2d97f6910b16bd338d3060f261f53f144965f755599aab1acda1e13cf1731b1b","Warn: containerImage not pinned by hash: airbyte-integrations/connectors/source-sftp/src/test-integration/resources/sftp/Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: airbyte-integrations/connectors/source-stock-ticker-api-tutorial/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:2d97f6910b16bd338d3060f261f53f144965f755599aab1acda1e13cf1731b1b","Warn: containerImage not pinned by hash: docker-images/Dockerfile.java-connector:10","Warn: containerImage not pinned by hash: docker-images/Dockerfile.java-connector-base:3: pin your Docker image by updating docker.io/amazoncorretto:21-al2023 to docker.io/amazoncorretto:21-al2023@sha256:de27588c570049ff6c970530cf32f0eb41a082edd3f753e8f923e9c82e2ca97e","Warn: containerImage not pinned by hash: docker-images/Dockerfile.java-connector-non-airbyte-ci:10","Warn: containerImage not pinned by hash: docker-images/Dockerfile.manifest-only-connector:10: pin your Docker image by updating docker.io/airbyte/source-declarative-manifest:latest to docker.io/airbyte/source-declarative-manifest:latest@sha256:8ba296f84269d2bac67ecd36cf38bcb7158d5f8634d889e669a4309f3d00c617","Warn: containerImage not pinned by hash: docker-images/Dockerfile.python-connector:8","Warn: containerImage not pinned by hash: docker-images/Dockerfile.python-connector:42","Warn: containerImage not pinned by hash: tools/site/link_checker.Dockerfile:1: pin your Docker image by updating google/dart to google/dart@sha256:18bddbade58e5109a38a7bcd44839bbd29341ea3f091debf936a84c6da625bc7","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/Dockerfile:21","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/Dockerfile:23","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/Dockerfile:26","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/clickhouse.Dockerfile:20","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/clickhouse.Dockerfile:22","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/clickhouse.Dockerfile:25","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/clickhouse.Dockerfile:28","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/duckdb.Dockerfile:21","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/duckdb.Dockerfile:23","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/duckdb.Dockerfile:26","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/duckdb.Dockerfile:27","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/duckdb.Dockerfile:30","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mssql.Dockerfile:55","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mssql.Dockerfile:57","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mssql.Dockerfile:60","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mssql.Dockerfile:62","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mysql.Dockerfile:22","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mysql.Dockerfile:24","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mysql.Dockerfile:27","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/mysql.Dockerfile:28","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/oracle.Dockerfile:20","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/oracle.Dockerfile:40","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/oracle.Dockerfile:42","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/oracle.Dockerfile:45","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/oracle.Dockerfile:47","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/oracle.Dockerfile:53","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/redshift.Dockerfile:22","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/redshift.Dockerfile:24","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/redshift.Dockerfile:27","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/snowflake.Dockerfile:22","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/snowflake.Dockerfile:24","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/snowflake.Dockerfile:27","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/tidb.Dockerfile:21","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/tidb.Dockerfile:23","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/tidb.Dockerfile:26","Warn: pipCommand not pinned by hash: airbyte-integrations/bases/base-normalization/tidb.Dockerfile:27","Warn: pipCommand not pinned by hash: airbyte-integrations/connectors/source-mysql/integration_tests/Dockerfile:8","Warn: pipCommand not pinned by hash: airbyte-integrations/connectors/source-python-http-tutorial/Dockerfile:10","Warn: pipCommand not pinned by hash: airbyte-integrations/connectors/source-stock-ticker-api-tutorial/Dockerfile:6","Warn: pipCommand not pinned by hash: docker-images/Dockerfile.python-connector-base:35-44","Warn: pipCommand not pinned by hash: .github/workflows/agent-sdk-docs-generate.yml:84","Warn: pipCommand not pinned by hash: .github/workflows/agent-sdk-docs-generate.yml:85","Warn: pipCommand not pinned by hash: .github/workflows/pyairbyte-docs-generate.yml:72","Warn: pipCommand not pinned by hash: .github/workflows/pyairbyte-docs-generate.yml:75","Info: 185 out of 202 GitHub-owned GitHubAction dependencies pinned","Info: 222 out of 247 third-party GitHubAction dependencies pinned","Info:   1 out of  27 containerImage dependencies pinned","Info:   0 out of  44 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: SAST configuration detected: CodeQL","Info: SAST configuration detected: CodeQL","Info: SAST configuration detected: CodeQL","Warn: 7 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}}]}