{"date":"2026-05-27T05:18:12Z","repo":{"name":"github.com/intel/intel-device-plugins-for-kubernetes","commit":"c0850a1ef8c853050f4c50110c770b98636414dd"},"scorecard":{"version":"v5.3.0","commit":"c22063e786c11f9dd714d777a687ff7c4599b600"},"score":7.7,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:29","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/ci.yaml:30","Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yaml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:19","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/ci.yaml:20","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/devel.yaml:16","Info: jobLevel 'actions' permission set to 'read': .github/workflows/devel.yaml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:15","Info: jobLevel 'actions' permission set to 'read': .github/workflows/devel.yaml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:25","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/devel.yaml:26","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/devel.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:52","Info: jobLevel 'contents' permission set to 'read': .github/workflows/lib-publish.yaml:41","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/lib-trivy.yaml:76","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/lib-validate.yaml:33","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/release.yaml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yaml:27","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:39","Info: jobLevel 'actions' permission set to 'read': .github/workflows/trivy-periodic.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:12","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ci.yaml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:8","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/devel.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-build.yaml:7","Info: topLevel 'actions' permission set to 'read': .github/workflows/lib-codeql.yaml:7","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-codeql.yaml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-e2e.yaml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-publish.yaml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-scorecard.yaml:7","Info: topLevel 'actions' permission set to 'read': .github/workflows/lib-trivy.yaml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-trivy.yaml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-validate.yaml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:7","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/release.yaml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trivy-periodic.yaml:10"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2026-5005","Warn: Project is vulnerable to: GO-2026-5006","Warn: Project is vulnerable to: GO-2026-5013","Warn: Project is vulnerable to: GO-2026-5014","Warn: Project is vulnerable to: GO-2026-5015","Warn: Project is vulnerable to: GO-2026-5016","Warn: Project is vulnerable to: GO-2026-5017","Warn: Project is vulnerable to: GO-2026-5018","Warn: Project is vulnerable to: GO-2026-5019","Warn: Project is vulnerable to: GO-2026-5020","Warn: Project is vulnerable to: GO-2026-5021","Warn: Project is vulnerable to: GO-2026-5023","Warn: Project is vulnerable to: GO-2026-5033","Warn: Project is vulnerable to: GO-2026-5025","Warn: Project is vulnerable to: GO-2026-5026","Warn: Project is vulnerable to: GO-2026-5027","Warn: Project is vulnerable to: GO-2026-5028","Warn: Project is vulnerable to: GO-2026-5029","Warn: Project is vulnerable to: GO-2026-5030","Warn: Project is vulnerable to: GO-2025-3521","Warn: Project is vulnerable to: GO-2025-3547"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#sast"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(release-0.35): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#branch-protection"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: containerImage not pinned by hash: build/docker/intel-deviceplugin-operator.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-deviceplugin-operator.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-dlb-initcontainer.Dockerfile:38: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-dlb-initcontainer.Dockerfile:58: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-dlb-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-dlb-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-dsa-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-dsa-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-fpga-admissionwebhook.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-fpga-admissionwebhook.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-fpga-initcontainer.Dockerfile:38: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-fpga-initcontainer.Dockerfile:86: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-fpga-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-fpga-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-gpu-fakedev.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-gpu-fakedev.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-gpu-initcontainer.Dockerfile:38: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-gpu-initcontainer.Dockerfile:75: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-gpu-levelzero.Dockerfile:19: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-gpu-levelzero.Dockerfile:54: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:7932337e1c5f9a5482fdae0f2b082f0b48563629039a9fd92ffceb1fdc120e32","Warn: containerImage not pinned by hash: build/docker/intel-gpu-levelzero.ubi.Dockerfile:20: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi:9.6 to registry.access.redhat.com/ubi9/ubi:9.6@sha256:dec374e05cc13ebbc0975c9f521f3db6942d27f8ccdf06b180160490eef8bdbc","Warn: containerImage not pinned by hash: build/docker/intel-gpu-levelzero.ubi.Dockerfile:52: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi:9.6 to registry.access.redhat.com/ubi9/ubi:9.6@sha256:dec374e05cc13ebbc0975c9f521f3db6942d27f8ccdf06b180160490eef8bdbc","Warn: containerImage not pinned by hash: build/docker/intel-gpu-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-gpu-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-iaa-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-iaa-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-idxd-config-initcontainer.Dockerfile:17: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:7932337e1c5f9a5482fdae0f2b082f0b48563629039a9fd92ffceb1fdc120e32","Warn: containerImage not pinned by hash: build/docker/intel-idxd-config-initcontainer.ubi.Dockerfile:17: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi:latest to registry.access.redhat.com/ubi9/ubi:latest@sha256:8942b73866f8434571d6fc4c10cbebd48982995d2249c39302e4d71e7df3afd9","Warn: containerImage not pinned by hash: build/docker/intel-npu-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-npu-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-qat-initcontainer.Dockerfile:38: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-qat-initcontainer.Dockerfile:58: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-qat-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-qat-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-sgx-admissionwebhook.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-sgx-admissionwebhook.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-sgx-initcontainer.Dockerfile:38: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-sgx-initcontainer.Dockerfile:75: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-sgx-plugin.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-sgx-plugin.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/intel-xpumanager-sidecar.Dockerfile:39: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/intel-xpumanager-sidecar.Dockerfile:59: pin your Docker image by updating registry.access.redhat.com/ubi9-micro:latest to registry.access.redhat.com/ubi9-micro:latest@sha256:dbee6ddfcf53e1786845b8f29219946e202d99c3afac69799c2dc4edec8b937d","Warn: containerImage not pinned by hash: build/docker/templates/intel-dlb-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-dlb-initcontainer.Dockerfile.in:13","Warn: containerImage not pinned by hash: build/docker/templates/intel-fpga-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-fpga-initcontainer.Dockerfile.in:19","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-initcontainer.Dockerfile.in:16","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-levelzero.Dockerfile.in:6: pin your Docker image by updating golang:1.26-trixie to golang:1.26-trixie@sha256:0f6b034c99663ea8957e7dae99124e37374cbe7fcb5b5646f19b185f8f976279","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-levelzero.Dockerfile.in:46: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:7932337e1c5f9a5482fdae0f2b082f0b48563629039a9fd92ffceb1fdc120e32","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-levelzero.ubi.Dockerfile.in:8: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi:9.6 to registry.access.redhat.com/ubi9/ubi:9.6@sha256:dec374e05cc13ebbc0975c9f521f3db6942d27f8ccdf06b180160490eef8bdbc","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-levelzero.ubi.Dockerfile.in:46: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi:9.6 to registry.access.redhat.com/ubi9/ubi:9.6@sha256:dec374e05cc13ebbc0975c9f521f3db6942d27f8ccdf06b180160490eef8bdbc","Warn: containerImage not pinned by hash: build/docker/templates/intel-idxd-config-initcontainer.Dockerfile.in:1: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:7932337e1c5f9a5482fdae0f2b082f0b48563629039a9fd92ffceb1fdc120e32","Warn: containerImage not pinned by hash: build/docker/templates/intel-idxd-config-initcontainer.ubi.Dockerfile.in:1: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi:latest to registry.access.redhat.com/ubi9/ubi:latest@sha256:8942b73866f8434571d6fc4c10cbebd48982995d2249c39302e4d71e7df3afd9","Warn: containerImage not pinned by hash: build/docker/templates/intel-qat-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-qat-initcontainer.Dockerfile.in:13","Warn: containerImage not pinned by hash: build/docker/templates/intel-sgx-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-sgx-initcontainer.Dockerfile.in:16","Warn: containerImage not pinned by hash: demo/accel-config-demo/Dockerfile:15: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:7932337e1c5f9a5482fdae0f2b082f0b48563629039a9fd92ffceb1fdc120e32","Warn: containerImage not pinned by hash: demo/crypto-perf/Dockerfile:1: pin your Docker image by updating debian:sid-slim to debian:sid-slim@sha256:5b4499296ba0dd66df646195ad666987fd1a4127489578dd8800a2bbbd8b3741","Warn: containerImage not pinned by hash: demo/crypto-perf/Dockerfile:41: pin your Docker image by updating debian:sid-slim to debian:sid-slim@sha256:5b4499296ba0dd66df646195ad666987fd1a4127489578dd8800a2bbbd8b3741","Warn: containerImage not pinned by hash: demo/dlb-dpdk-demo/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: demo/dlb-dpdk-demo/Dockerfile:27: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: demo/dlb-libdlb-demo/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: demo/dlb-libdlb-demo/Dockerfile:19: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: demo/dsa-dpdk-dmadevtest/Dockerfile:1: pin your Docker image by updating debian:sid-slim to debian:sid-slim@sha256:5b4499296ba0dd66df646195ad666987fd1a4127489578dd8800a2bbbd8b3741","Warn: containerImage not pinned by hash: demo/dsa-dpdk-dmadevtest/Dockerfile:24: pin your Docker image by updating debian:sid-slim to debian:sid-slim@sha256:5b4499296ba0dd66df646195ad666987fd1a4127489578dd8800a2bbbd8b3741","Warn: containerImage not pinned by hash: demo/intel-npu-demo/Dockerfile:1: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b","Warn: containerImage not pinned by hash: demo/intel-npu-demo/Dockerfile:18: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b","Warn: containerImage not pinned by hash: demo/intel-opencl-icd/Dockerfile:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:4f838adc7181d9039ac795a7d0aba05a9bd9ecd480d294483169c5def983b64d","Warn: containerImage not pinned by hash: demo/opae-nlb-demo/Dockerfile:1: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:7932337e1c5f9a5482fdae0f2b082f0b48563629039a9fd92ffceb1fdc120e32","Warn: containerImage not pinned by hash: demo/opae-nlb-demo/Dockerfile:27: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:7932337e1c5f9a5482fdae0f2b082f0b48563629039a9fd92ffceb1fdc120e32","Warn: containerImage not pinned by hash: demo/openssl-qat-engine/Dockerfile:1: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b","Warn: containerImage not pinned by hash: demo/openssl-qat-engine/Dockerfile:29: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b","Warn: containerImage not pinned by hash: demo/sgx-aesmd-demo/Dockerfile:3: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b","Warn: containerImage not pinned by hash: demo/sgx-sdk-demo/Dockerfile:1: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b","Warn: containerImage not pinned by hash: demo/sgx-sdk-demo/Dockerfile:69: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b","Warn: goCommand not pinned by hash: .github/workflows/lib-validate.yaml:91","Info:  32 out of  32 GitHub-owned GitHubAction dependencies pinned","Info:  10 out of  10 third-party GitHubAction dependencies pinned","Info:   0 out of  77 containerImage dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#pinned-dependencies"}},{"name":"CI-Tests","score":10,"reason":"17 out of 17 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 10 contributing companies or organizations","details":["Info: found contributions from: 01org, bmwcarit, cncf, envoyproxy, intel, kubernetes, martindouglas@iinet.com, nokia, otcshare, red hat"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#contributors"}}]}