{"date":"2026-08-24","repo":{"name":"github.com/facebook/rocksdb","commit":"e6a2ee0bd211489e64a45a6a0f6ce1dc67e195d7"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ai-review-analysis.yml:94","Info: jobLevel 'actions' permission set to 'read': .github/workflows/ai-review-analysis.yml:97","Info: jobLevel 'checks' permission set to 'read': .github/workflows/ai-review-analysis.yml:99","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/ai-review-analysis.yml:101","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ai-review-analysis.yml:874","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/ai-review-analysis.yml:875","Warn: no topLevel permission defined: .github/workflows/ai-review-analysis.yml:1","Info: found token with 'none' permissions: .github/workflows/benchmark-linux.yml:1","Info: found token with 'none' permissions: .github/workflows/clang-tidy.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/claude-review.yml:43","Info: topLevel 'actions' permission set to 'read': .github/workflows/claude-review.yml:46","Info: topLevel 'checks' permission set to 'read': .github/workflows/claude-review.yml:47","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/claude-review.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/codex-review.yml:39","Info: topLevel 'actions' permission set to 'read': .github/workflows/codex-review.yml:42","Info: topLevel 'checks' permission set to 'read': .github/workflows/codex-review.yml:43","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/codex-review.yml:44","Info: found token with 'none' permissions: .github/workflows/nightly-candidate.yml:1","Info: found token with 'none' permissions: .github/workflows/nightly.yml:1","Info: found token with 'none' permissions: .github/workflows/pr-jobs-candidate.yml:1","Info: found token with 'none' permissions: .github/workflows/pr-jobs.yml:1","Info: found token with 'none' permissions: .github/workflows/weekly.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: GNU General Public License v2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: CppLibFuzzer integration found: fuzz/db_fuzzer.cc:33","Info: CppLibFuzzer integration found: fuzz/db_fuzzer.cc:33"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/facebook/.github/SECURITY.md:1","Info: Found linked content: github.com/facebook/.github/SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: github.com/facebook/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: reached EOF without closing quote \": build_tools/fbcode_config.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:390: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:416: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:498: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:515: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:585: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:619: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:634: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:659: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:680: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:775: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:812: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:829: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:842: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:855: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:893: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:962: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:987: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:995: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1089: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1105: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1197: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1245: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1260: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1286: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1305: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1401: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1443: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1458: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1471: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-analysis.yml:1480: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-comment.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-comment.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-comment.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-comment.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-comment.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-comment.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ai-review-comment.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/ai-review-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark-linux.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/benchmark-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clang-tidy-comment.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/clang-tidy-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clang-tidy-comment.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/clang-tidy-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clang-tidy-comment.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/clang-tidy-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clang-tidy.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/clang-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clang-tidy.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/clang-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-candidate.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly-candidate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs-candidate.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs-candidate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs-candidate.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs-candidate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:769: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:462: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:619: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:642: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:663: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:664: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:715: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:716: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:289: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:689: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:690: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:311: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:399: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:512: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:529: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:530: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:378: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:489: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:553: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:554: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:604: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:745: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:755: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-jobs.yml:759: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/pr-jobs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/weekly.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/rocksdb/weekly.yml/main?enable=pin","Warn: containerImage not pinned by hash: build_tools/ubuntu20_image/Dockerfile:2: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: build_tools/ubuntu22_image/Dockerfile:28: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:2edbbc5dc405e9612ba3584ce95480277e3eb374407b5505fe26f17df77c7dbc","Warn: containerImage not pinned by hash: build_tools/ubuntu24_image/Dockerfile:28: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: tools/Dockerfile:1: pin your Docker image by updating buildpack-deps:wheezy to buildpack-deps:wheezy@sha256:6780c8a9b9e1a46ed84d7d4990b4fae37f8d767bcd04990d882175f8fc4181de","Warn: downloadThenRun not pinned by hash: build_tools/ubuntu20_image/Dockerfile:24","Warn: downloadThenRun not pinned by hash: build_tools/ubuntu22_image/Dockerfile:51","Warn: npmCommand not pinned by hash: .github/workflows/ai-review-analysis.yml:437","Warn: npmCommand not pinned by hash: .github/workflows/ai-review-analysis.yml:1002","Warn: pipCommand not pinned by hash: .github/workflows/pr-jobs.yml:61","Warn: pipCommand not pinned by hash: .github/workflows/pr-jobs.yml:63","Info:   0 out of  84 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of   4 containerImage dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned","Info:   1 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Warn: 'allow deletion' enabled on branch '11.8.fb'","Warn: 'allow deletion' enabled on branch '11.1.fb'","Warn: 'allow deletion' enabled on branch '10.10.fb'","Warn: 'allow deletion' enabled on branch '10.9.fb'","Warn: 'allow deletion' enabled on branch '10.8.fb'","Warn: 'allow deletion' enabled on branch '10.7.fb'","Warn: 'allow deletion' enabled on branch '10.6.fb'","Warn: 'allow deletion' enabled on branch '10.5.fb'","Warn: 'allow deletion' enabled on branch '10.4.fb'","Warn: 'allow deletion' enabled on branch '10.2.fb'","Warn: 'allow deletion' enabled on branch '9.11.fb'","Warn: 'allow deletion' enabled on branch '10.0.fb'","Warn: 'allow deletion' enabled on branch '9.4.fb'","Warn: 'allow deletion' enabled on branch '9.3.fb'","Warn: 'allow deletion' enabled on branch '9.2.fb'","Warn: 'allow deletion' enabled on branch '9.1.fb'","Warn: 'allow deletion' enabled on branch '9.0.fb'","Info: 'force pushes' disabled on branch 'main'","Warn: 'force pushes' enabled on branch '11.8.fb'","Warn: 'force pushes' enabled on branch '11.1.fb'","Warn: 'force pushes' enabled on branch '10.10.fb'","Warn: 'force pushes' enabled on branch '10.9.fb'","Warn: 'force pushes' enabled on branch '10.8.fb'","Warn: 'force pushes' enabled on branch '10.7.fb'","Warn: 'force pushes' enabled on branch '10.6.fb'","Warn: 'force pushes' enabled on branch '10.5.fb'","Warn: 'force pushes' enabled on branch '10.4.fb'","Warn: 'force pushes' enabled on branch '10.2.fb'","Warn: 'force pushes' enabled on branch '9.11.fb'","Warn: 'force pushes' enabled on branch '10.0.fb'","Warn: 'force pushes' enabled on branch '9.4.fb'","Warn: 'force pushes' enabled on branch '9.3.fb'","Warn: 'force pushes' enabled on branch '9.2.fb'","Warn: 'force pushes' enabled on branch '9.1.fb'","Warn: 'force pushes' enabled on branch '9.0.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch '11.8.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '11.1.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.10.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.9.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.8.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.7.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.6.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.5.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.4.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.2.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '9.11.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '10.0.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '9.4.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '9.3.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '9.2.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '9.1.fb'","Warn: 'branch protection settings apply to administrators' is disabled on branch '9.0.fb'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: could not determine whether codeowners review is allowed","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch '11.8.fb'","Warn: 'up-to-date branches' is disabled on branch '11.1.fb'","Warn: 'up-to-date branches' is disabled on branch '10.10.fb'","Warn: 'up-to-date branches' is disabled on branch '10.9.fb'","Warn: 'up-to-date branches' is disabled on branch '10.8.fb'","Warn: 'up-to-date branches' is disabled on branch '10.7.fb'","Warn: 'up-to-date branches' is disabled on branch '10.6.fb'","Warn: 'up-to-date branches' is disabled on branch '10.5.fb'","Warn: 'up-to-date branches' is disabled on branch '10.4.fb'","Warn: 'up-to-date branches' is disabled on branch '10.2.fb'","Warn: 'up-to-date branches' is disabled on branch '9.11.fb'","Warn: 'up-to-date branches' is disabled on branch '10.0.fb'","Warn: 'up-to-date branches' is disabled on branch '9.4.fb'","Warn: 'up-to-date branches' is disabled on branch '9.3.fb'","Warn: 'up-to-date branches' is disabled on branch '9.2.fb'","Warn: 'up-to-date branches' is disabled on branch '9.1.fb'","Warn: 'up-to-date branches' is disabled on branch '9.0.fb'","Info: status check found to merge onto on branch 'main'","Info: status check found to merge onto on branch '11.8.fb'","Info: status check found to merge onto on branch '11.1.fb'","Info: status check found to merge onto on branch '10.10.fb'","Info: status check found to merge onto on branch '10.9.fb'","Info: status check found to merge onto on branch '10.8.fb'","Info: status check found to merge onto on branch '10.7.fb'","Info: status check found to merge onto on branch '10.6.fb'","Info: status check found to merge onto on branch '10.5.fb'","Info: status check found to merge onto on branch '10.4.fb'","Info: status check found to merge onto on branch '10.2.fb'","Info: status check found to merge onto on branch '9.11.fb'","Info: status check found to merge onto on branch '10.0.fb'","Info: status check found to merge onto on branch '9.4.fb'","Info: status check found to merge onto on branch '9.3.fb'","Info: status check found to merge onto on branch '9.2.fb'","Info: status check found to merge onto on branch '9.1.fb'","Info: status check found to merge onto on branch '9.0.fb'","Info: PRs are required in order to make changes on branch 'main'","Warn: PRs are not required to make changes on branch '11.8.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '11.1.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.10.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.9.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.8.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.7.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.6.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.5.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.4.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.2.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '9.11.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '10.0.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '9.4.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '9.3.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '9.2.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '9.1.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings","Warn: PRs are not required to make changes on branch '9.0.fb'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}}]}