{"date":"2026-08-24","repo":{"name":"github.com/apache/hudi","commit":"739ab7696979150304faf221e3344fe4949e6adc"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":6.5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/hudi_trino_compat.yml:30","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/hudi_trino_compat.yml:157","Info: topLevel 'contents' permission set to 'read': .github/workflows/agent_gateway_ci.yml:41","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/azure_ci_check.yml:25","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/azure_ci_check.yml:26","Info: topLevel 'issues' permission set to 'read': .github/workflows/azure_ci_check.yml:27","Warn: no topLevel permission defined: .github/workflows/bot.yml:1","Warn: no topLevel permission defined: .github/workflows/commit_coauthor_validation.yml:1","Warn: no topLevel permission defined: .github/workflows/hudi_trino_ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/hudi_trino_compat.yml:20","Warn: no topLevel permission defined: .github/workflows/hudi_trino_e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/maven_artifact_validation.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_compliance.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_title_validation.yml:1","Warn: no topLevel permission defined: .github/workflows/release_candidate_validation.yml:1","Warn: topLevel 'actions' permission set to 'write': .github/workflows/scheduled_workflow.yml:29","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/scheduled_workflow.yml:26","Info: topLevel 'issues' permission set to 'read': .github/workflows/scheduled_workflow.yml:28","Warn: no topLevel permission defined: .github/workflows/update_pr_compliance.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/apache/.github/.github/SECURITY.md:1","Info: Found linked content: github.com/apache/.github/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/apache/.github/.github/SECURITY.md:1","Info: Found text in security policy: github.com/apache/.github/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/bot.yml:1232"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: hudi-lakehouse/local-dev/scripts/smoke-test.sh:32","Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: hudi-lakehouse/local-dev/scripts/smoke-test.sh:41","Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: hudi-lakehouse/scripts/quickstart.sh:144","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/agent_gateway_ci.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/agent_gateway_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/agent_gateway_ci.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/agent_gateway_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/agent_gateway_ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/agent_gateway_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/azure_ci_check.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/azure_ci_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/azure_ci_check.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/azure_ci_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/azure_ci_check.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/azure_ci_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:944: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:947: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:682: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:685: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:877: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:880: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1340: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1343: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:744: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:747: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1011: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1014: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1080: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1083: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1266: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1269: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1443: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1446: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1140: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:1143: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:803: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:806: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/bot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_ci.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_ci.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_ci.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_ci.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_ci.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_compat.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_compat.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_compat.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_compat.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_compat.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_compat.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_compat.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_compat.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_compat.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_compat.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_compat.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_compat.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_compat.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_compat.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_e2e.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_e2e.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_e2e.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_e2e.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_e2e.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hudi_trino_e2e.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/hudi_trino_e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_artifact_validation.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/maven_artifact_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_artifact_validation.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/maven_artifact_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_compliance.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/pr_compliance.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_compliance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/pr_compliance.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_candidate_validation.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/release_candidate_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_candidate_validation.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/release_candidate_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_candidate_validation.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/release_candidate_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_candidate_validation.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/release_candidate_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_candidate_validation.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/release_candidate_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_candidate_validation.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/release_candidate_validation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scheduled_workflow.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/scheduled_workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scheduled_workflow.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/scheduled_workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update_pr_compliance.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/update_pr_compliance.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update_pr_compliance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/hudi/update_pr_compliance.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:22: pin your Docker image by updating apachehudi/hudi-ci-bundle-validation-base:azure_ci_test_base_java11 to apachehudi/hudi-ci-bundle-validation-base:azure_ci_test_base_java11@sha256:b76f29237ba134c603df5d3ea2337b8487db29f1d6211c10dd0ea044f6e531dc","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/base/Dockerfile:18: pin your Docker image by updating openjdk:8u342-jdk-slim-bullseye to openjdk:8u342-jdk-slim-bullseye@sha256:19578a1e13b7a1e4cab9b227fb7b5d80e14665cf4024c6407d72ba89842a97ed","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/base_java11/Dockerfile:18: pin your Docker image by updating eclipse-temurin:11-jdk-jammy to eclipse-temurin:11-jdk-jammy@sha256:bde5229117ab6dbd31a267132258ecbcae228658a8d22981c365585e95588356","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/base_java17/Dockerfile:19: pin your Docker image by updating eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-jammy@sha256:e17d77fb030dd4b642dc078d048a5fb9efcb3676ee20305d905949105a6ccd5a","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/base_java17/Dockerfile:34: pin your Docker image by updating eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-jammy@sha256:e17d77fb030dd4b642dc078d048a5fb9efcb3676ee20305d905949105a6ccd5a","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/datanode/Dockerfile:21","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/historyserver/Dockerfile:21","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/hive_base/Dockerfile:20","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/namenode/Dockerfile:21","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/prestobase/Dockerfile:24: pin your Docker image by updating apachehudi/hudi-hadoop_2.8.4-base-java11:latest to apachehudi/hudi-hadoop_2.8.4-base-java11:latest@sha256:cccdd6390361d9f60410740f467e477335a7c4eb1f0bd18f224bc705e9512440","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/spark_base/Dockerfile:20: pin your Docker image by updating apachehudi/hudi-hadoop_3.3.4-hive_3.1.3 to apachehudi/hudi-hadoop_3.3.4-hive_3.1.3@sha256:8287903276024f5eb884ebe4cebb28d9c30b17817071afbd3fb7c54d7f0ec014","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/sparkadhoc/Dockerfile:21: pin your Docker image by updating apachehudi/hudi-hadoop_3.3.4-hive_3.1.3-sparkbase_3.5.3 to apachehudi/hudi-hadoop_3.3.4-hive_3.1.3-sparkbase_3.5.3@sha256:8c405f96d3900c34fe972fec6e096fd9d54bb0fc6ba4c23d4b1f2e110ad471e1","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/sparkmaster/Dockerfile:21: pin your Docker image by updating apachehudi/hudi-hadoop_3.3.4-hive_3.1.3-sparkbase_3.5.3 to apachehudi/hudi-hadoop_3.3.4-hive_3.1.3-sparkbase_3.5.3@sha256:8c405f96d3900c34fe972fec6e096fd9d54bb0fc6ba4c23d4b1f2e110ad471e1","Warn: containerImage not pinned by hash: docker/hoodie/hadoop/sparkworker/Dockerfile:21: pin your Docker image by updating apachehudi/hudi-hadoop_3.3.4-hive_3.1.3-sparkbase_3.5.3 to apachehudi/hudi-hadoop_3.3.4-hive_3.1.3-sparkbase_3.5.3@sha256:8c405f96d3900c34fe972fec6e096fd9d54bb0fc6ba4c23d4b1f2e110ad471e1","Warn: containerImage not pinned by hash: docker/trino/Dockerfile:19: pin your Docker image by updating trinodb/trino:483 to trinodb/trino:483@sha256:db58cc93e593a2706553745f276bb119c9810e69918be56ecde088ba7ccb0534","Warn: containerImage not pinned by hash: hudi-agent-gateway/Dockerfile:18: pin your Docker image by updating python:3.12-slim to python:3.12-slim@sha256:2c941e860699f878900b0edc2403613c234d4b32eda3cc9fa7036991a2a63c4a","Warn: containerImage not pinned by hash: hudi-examples/hudi-examples-k8s/Dockerfile:20: pin your Docker image by updating flink:1.18 to flink:1.18@sha256:f0e9ffd07f3d43291dfaf7e0609eb2871462193275d452affbe5fac091017ae3","Warn: containerImage not pinned by hash: hudi-lakehouse/images/spark/Dockerfile:29: pin your Docker image by updating apache/spark:3.5.7-scala2.12-java17-python3-ubuntu to apache/spark:3.5.7-scala2.12-java17-python3-ubuntu@sha256:7897b9a69efa94caccc52579e310a2fe68fb75b88a3d55b97b31568e5e233176","Warn: containerImage not pinned by hash: hudi-lakehouse/images/trino/Dockerfile:25: pin your Docker image by updating trinodb/trino:472 to trinodb/trino:472@sha256:cc9cab2afd71637176e94c729a05862d1b2d07f5b13b109f1ae041d3e78428dd","Warn: containerImage not pinned by hash: hudi-notebooks/Dockerfile.hive:20","Warn: containerImage not pinned by hash: hudi-notebooks/Dockerfile.presto:19","Warn: containerImage not pinned by hash: hudi-notebooks/Dockerfile.spark:21","Warn: containerImage not pinned by hash: hudi-notebooks/Dockerfile.spark4:21","Warn: containerImage not pinned by hash: hudi-notebooks/Dockerfile.trino:19","Warn: containerImage not pinned by hash: packaging/bundle-validation/Dockerfile:19","Warn: containerImage not pinned by hash: packaging/bundle-validation/azure/Dockerfile:17: pin your Docker image by updating azul/zulu-openjdk-alpine:11 to azul/zulu-openjdk-alpine:11@sha256:4f0b752a0fd4ef22c62da0a87a8f8d0a140daffb680f0a9b96c62dd469426877","Warn: containerImage not pinned by hash: packaging/bundle-validation/base-dev/Dockerfile:17: pin your Docker image by updating adoptopenjdk/openjdk8:alpine to adoptopenjdk/openjdk8:alpine@sha256:94a244e6b541e8111b3cba9c454b5764a303258012028a5e164225b993425d2d","Warn: containerImage not pinned by hash: packaging/bundle-validation/base/Dockerfile:17: pin your Docker image by updating adoptopenjdk/openjdk8:alpine to adoptopenjdk/openjdk8:alpine@sha256:94a244e6b541e8111b3cba9c454b5764a303258012028a5e164225b993425d2d","Warn: pipCommand not pinned by hash: hudi-agent-gateway/Dockerfile:28-31","Warn: pipCommand not pinned by hash: hudi-agent-gateway/Dockerfile:33","Warn: pipCommand not pinned by hash: hudi-notebooks/Dockerfile.spark:56-62","Warn: pipCommand not pinned by hash: hudi-notebooks/Dockerfile.spark:56-62","Warn: pipCommand not pinned by hash: hudi-notebooks/Dockerfile.spark4:55-62","Warn: pipCommand not pinned by hash: hudi-notebooks/Dockerfile.spark4:55-62","Warn: pipCommand not pinned by hash: .github/workflows/agent_gateway_ci.yml:63","Info:   0 out of  68 GitHub-owned GitHubAction dependencies pinned","Info:  13 out of  13 third-party GitHubAction dependencies pinned","Info:   0 out of  28 containerImage dependencies pinned","Info:   0 out of   7 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}