{"date":"2026-11-05T07:39:12Z","repo":{"name":"github.com/newrelic/newrelic-dotnet-agent","commit":"1a9bf2159dbe09f41dc3e6514f82b5fdb708f67d"},"scorecard":{"version":"v5.6.0","commit":"61e84743356275f6ffca23b1b2f2cb945e19eb96"},"score":6.8,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dependency-update-tool","short":"Determines if the project uses a dependency update tool."}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: build/Tools/NUnit-Console/Mono.Cecil.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit-project-loader.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit-v2-result-writer.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit.core.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit.core.interfaces.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit.v2.driver.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/teamcity-event-listener.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/vs-project-loader.dll:1","Warn: binary detected: build/Tools/NUnit-Console/nunit-agent-x86.exe:1","Warn: binary detected: build/Tools/NUnit-Console/nunit-agent.exe:1","Warn: binary detected: build/Tools/NUnit-Console/nunit.engine.api.dll:1","Warn: binary detected: build/Tools/NUnit-Console/nunit.engine.dll:1","Warn: binary detected: build/Tools/NUnit-Console/nunit3-console.exe:1","Warn: binary detected: build/Tools/NuGet/nuget.exe:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.abstractions.dll:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.console.exe:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.console.x86.exe:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.runner.reporters.net452.dll:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.runner.utility.net452.dll:1","Warn: binary detected: build/Tools/nuget.4.4.1.exe:1","Warn: binary detected: build/Tools/nuget.exe:1","Warn: binary detected: build/Tools/sqlncli.msi:1","Warn: binary detected: build/Tools/vswhere.exe:1","Warn: binary detected: build/Tools/xsd2code/Xsd2Code.Library.dll:1","Warn: binary detected: build/Tools/xsd2code/Xsd2Code.exe:1","Warn: binary detected: tests/Agent/IntegrationTests/ExternalLibs/NewRelic.Api.Agent.dll:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:212","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:525","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:526","Info: found token with 'none' permissions: .github/workflows/all_solutions.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:85","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:171","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:172","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:201","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:58","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/all_solutions.yml:59","Info: found token with 'none' permissions: .github/workflows/all_solutions.yml:1","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:473","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:474","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:66","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:188","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:421","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:422","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:283","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:340","Info: jobLevel 'actions' permission set to 'read': .github/workflows/all_solutions.yml:641","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/all_solutions.yml:642","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:42","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/build_profiler.yml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:162","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:214","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:265","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:308","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/check_modified_files.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:28","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/codeql.yml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:95","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:94","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/dependabot_ci_dispatch.yml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/deploy_agent.yml:526","Info: jobLevel 'packages' permission set to 'read': .github/workflows/deploy_agent.yml:527","Info: jobLevel 'contents' permission set to 'read': .github/workflows/deploy_agent.yml:539","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/dotty.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:376","Info: jobLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:55","Info: jobLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:75","Info: found token with 'none' permissions: .github/workflows/linux_container_tests.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/linux_container_tests.yml:117","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/linux_container_tests.yml:296","Info: jobLevel 'contents' permission set to 'read': .github/workflows/linux_container_tests.yml:297","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pr_title_checker.yml:21","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pr_title_checker.yml:22","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-please.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:75","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/targeted_tests.yml:86","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:87","Info: found token with 'none' permissions: .github/workflows/targeted_tests.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:62","Info: found token with 'none' permissions: .github/workflows/test_selection.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:49","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:70","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:412","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit_tests.yml:35","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/unit_tests.yml:36","Info: jobLevel 'actions' permission set to 'read': .github/workflows/unit_tests.yml:106","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/unit_tests.yml:107","Info: jobLevel 'contents' permission set to 'read': .github/workflows/workflow_lint.yml:15","Info: topLevel 'contents' permission set to 'read': .github/workflows/agent_metadata.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_buildtools.yml:14","Info: topLevel 'packages' permission set to 'read': .github/workflows/build_download_site_index_files.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_download_site_index_files.yml:47","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/check_modified_files.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:15","Info: topLevel 'actions' permission set to 'read': .github/workflows/compare_performance.yml:165","Info: topLevel 'contents' permission set to 'read': .github/workflows/compare_performance.yml:164","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependabot_ci_dispatch.yml:41","Info: found token with 'none' permissions: .github/workflows/dependabot_ci_trigger.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy-k8s-unboundedservices.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy_agent.yml:54","Info: topLevel 'packages' permission set to 'read': .github/workflows/deploy_agent.yml:55","Info: topLevel 'actions' permission set to 'read': .github/workflows/deploy_siteextension.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy_siteextension.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/dotty.yml:25","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:27","Info: topLevel 'contents' permission set to 'read': .github/workflows/linux_container_tests.yml:46","Info: topLevel 'contents' permission set to 'read': .github/workflows/markdowncheck.yml:14","Info: topLevel 'packages' permission set to 'read': .github/workflows/post_deploy_agent.yml:37","Info: topLevel 'contents' permission set to 'read': .github/workflows/post_deploy_agent.yml:36","Info: found token with 'none' permissions: .github/workflows/pr_title_checker.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish_release_notes.yml:26","Info: topLevel 'packages' permission set to 'read': .github/workflows/publish_release_notes.yml:27","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-please.yml:12","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/set_community_label.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/siteextension_release.yml:14","Info: found token with 'none' permissions: .github/workflows/targeted_tests.yml:1","Info: found token with 'none' permissions: .github/workflows/test_selection.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/unit_tests.yml:27","Info: found token with 'none' permissions: .github/workflows/workflow_lint.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Vulnerabilities","score":0,"reason":"12 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: https://osv.dev/GHSA-3rq8-h3gj-r5c6","Warn: Project is vulnerable to: https://osv.dev/GHSA-hxrm-9w7p-39cc","Warn: Project is vulnerable to: https://osv.dev/GHSA-7jgj-8wvc-jh57","Warn: Project is vulnerable to: https://osv.dev/GHSA-px2c-r924-mwcc","Warn: Project is vulnerable to: https://osv.dev/GHSA-8g2p-5pqh-5jmc","Warn: Project is vulnerable to: https://osv.dev/GHSA-98g6-xh36-x2p7","Warn: Project is vulnerable to: https://osv.dev/GHSA-7j9m-j397-g4wx","Warn: Project is vulnerable to: https://osv.dev/GHSA-473q-m89c-ghf8","Warn: Project is vulnerable to: https://osv.dev/GHSA-9pq7-rcxv-47vq","Warn: Project is vulnerable to: https://osv.dev/GHSA-4rr6-2v9v-wcpc","Warn: Project is vulnerable to: https://osv.dev/GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: https://osv.dev/GHSA-4f7c-pmjv-c25w"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#vulnerabilities","short":"Determines if the project has open, known unfixed vulnerabilities."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build_profiler.yml:349"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: SAST configuration detected: CodeQL","Warn: 6 commits out of 30 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: 'last push approval' is required to merge on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/newrelic/.github/SECURITY.md:1","Info: Found linked content: github.com/newrelic/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/newrelic/.github/SECURITY.md:1","Info: Found text in security policy: github.com/newrelic/.github/SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/agent_metadata.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/agent_metadata.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy_agent.yml:517: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/deploy_agent.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy_agent.yml:531: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/deploy_agent.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy_agent.yml:543: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/deploy_agent.yml/main?enable=pin","Warn: containerImage not pinned by hash: src/Agent/NewRelic/Profiler/linux/DebugDockerfile:3: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:21","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/CustomBaseContainerBuild/Dockerfile.CustomBaseImage:2","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:27","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/RuntimeAsyncTestApp/Dockerfile:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/RuntimeAsyncTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/RuntimeAsyncTestApp/Dockerfile:21","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/RuntimeAsyncTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:21","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:7","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:12","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:23","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:28","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:4: pin your Docker image by updating quay.io/centos/centos:stream9 to quay.io/centos/centos:stream9@sha256:99a7748660352b7d87e5689805ddafa6209d6019d0c5b642b5354656dff02be3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:9","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:20","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:25","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.continuousprofiling:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.continuousprofiling:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.continuousprofiling:21","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.continuousprofiling:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:6","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:11","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:27","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:21","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/cosmosdb/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:latest to mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:latest@sha256:9a4f69121f20c1d6502db84625c71ebb441ab61b01880a7b2d3d8031c6dac429","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/elastic7/Dockerfile:2: pin your Docker image by updating elasticsearch:7.17.10 to elasticsearch:7.17.10@sha256:43b9e781ebb2bd731ea3966bb816edce947e34965676046b3c0f8c17318cee72","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/elastic8/Dockerfile:1: pin your Docker image by updating elasticsearch:8.6.2 to elasticsearch:8.6.2@sha256:93bc71907ca0e6e3b4f181e0dc850b90bb6cb2686c2778def0b8542398983c28","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/elastic9/Dockerfile:1: pin your Docker image by updating elasticsearch:9.0.4 to elasticsearch:9.0.4@sha256:abbb10c17bf4259b3c44bb970a40fc231ad969052a58fcdcc9008fe75b1f9960","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mongodb32/Dockerfile:1: pin your Docker image by updating mongo:3.2 to mongo:3.2@sha256:0463a91d8eff189747348c154507afc7aba045baa40e8d58d8a4c798e71001f3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mongodb60/Dockerfile:1: pin your Docker image by updating mongo:6.0.27 to mongo:6.0.27@sha256:03cda579c8caad6573cb98c2b3d5ff5ead452a6450561129b89595b4b9c18de2","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mssql/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/mssql/server:2022-latest to mcr.microsoft.com/mssql/server:2022-latest@sha256:cf8f0ab2ebe61feec2eed2629061a07d247f791c2a8ddda74a4ac9f06a291718","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mysql/Dockerfile:1: pin your Docker image by updating mysql:lts to mysql:lts@sha256:df90258da46f6e7ff8574ff84f17618aba0765cac749928299c69fd4e7cb8ad8","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/oracle/Dockerfile:1: pin your Docker image by updating container-registry.oracle.com/database/free:latest-lite to container-registry.oracle.com/database/free:latest-lite@sha256:cf540c3fa190d7cffad08c491652ac07fc70314e510f6b87890449517d565e94","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/postgres/Dockerfile:1: pin your Docker image by updating postgres:15 to postgres:15@sha256:40e8c839f86c404f9bd1c456bb83f11b205f2cd95d753b34c2d074e89ecee786","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/rabbitmq/Dockerfile:1: pin your Docker image by updating rabbitmq:3.9.5 to rabbitmq:3.9.5@sha256:3b3f7b55be78e1b3c7330671ffc3f5e3670f66f040a4a429109a7f56c90464dc","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/redis/Dockerfile:1: pin your Docker image by updating redis:6.2.5 to redis:6.2.5@sha256:c98f0230b5f1831f4f5dd764c4ea8ef11d3e3a1a3593278eb952373d97c82b27","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/PerformanceTestApp/Dockerfile:13: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:10.0 to mcr.microsoft.com/dotnet/aspnet:10.0@sha256:de0ee358cdd672f7017a003bed21e9ac9ed48a27c922a59b18175b6e82fa7fee","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/ReportGenerator/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:10.0 to mcr.microsoft.com/dotnet/sdk:10.0@sha256:de4fe90a98845d75910b9769662465c84de1a934665c431279d1382b2bddc02b","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/ReportGenerator/Dockerfile:8: pin your Docker image by updating mcr.microsoft.com/dotnet/runtime:10.0 to mcr.microsoft.com/dotnet/runtime:10.0@sha256:a3f9f81954b9c810af2ed18849716c8dc74a4707bd0907fdbd69be81554c0f30","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/TrafficDriver/Dockerfile:1: pin your Docker image by updating python:3.12-slim to python:3.12-slim@sha256:b18b261e1b4974b4f321451ad5251ded85abb22c2b8b262da527dda1d031ab30","Warn: downloadThenRun not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/CustomBaseContainerBuild/Dockerfile.CustomBaseImage:16","Warn: pipCommand not pinned by hash: tests/Agent/PerformanceTests/TrafficDriver/Dockerfile:6","Warn: downloadThenRun not pinned by hash: deploy/linux/deploy_scripts/libexec/jenkins-download.bash:92","Info: 145 out of 145 GitHub-owned GitHubAction dependencies pinned","Info:  68 out of  72 third-party GitHubAction dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned","Info:   1 out of   2 pipCommand dependencies pinned","Info:  12 out of  74 containerImage dependencies pinned","Info:  16 out of  16 nugetCommand dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}},{"name":"CI-Tests","score":4,"reason":"14 out of 30 merged PRs checked by a CI test -- score normalized to 4","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#ci-tests","short":"Determines if the project runs tests before pull requests are merged."}},{"name":"Contributors","score":10,"reason":"project has 7 contributing companies or organizations","details":["Info: found contributions from: Faithlife, LogosBible, faithlife, mysql-net, new relic, newrelic, open-telemetry"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#contributors","short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies)."}}]}