{"date":"2026-09-10T07:42:27Z","repo":{"name":"github.com/newrelic/newrelic-dotnet-agent","commit":"130857db5930b9172b421eb84dcd5335d71cacd5"},"scorecard":{"version":"v5.5.0","commit":"c395761df6afe1a69e476bc60a013a94bcbc153f"},"score":7.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool","short":"Determines if the project uses a dependency update tool."}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:171","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:172","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:340","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:421","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:422","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:58","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/all_solutions.yml:59","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:201","Info: found token with 'none' permissions: .github/workflows/all_solutions.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:85","Info: found token with 'none' permissions: .github/workflows/all_solutions.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:188","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:212","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:283","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:473","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:474","Info: jobLevel 'actions' permission set to 'read': .github/workflows/all_solutions.yml:641","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/all_solutions.yml:642","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:66","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/all_solutions.yml:525","Info: jobLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:526","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:266","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:309","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:42","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/build_profiler.yml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:163","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:215","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/check_modified_files.yml:17","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:88","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:89","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:28","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/codeql.yml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:39","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/dependabot_ci_dispatch.yml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/deploy_agent.yml:475","Info: jobLevel 'packages' permission set to 'read': .github/workflows/deploy_agent.yml:476","Info: jobLevel 'contents' permission set to 'read': .github/workflows/deploy_agent.yml:488","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/dotty.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:50","Info: found token with 'none' permissions: .github/workflows/linux_container_tests.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/linux_container_tests.yml:115","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/linux_container_tests.yml:288","Info: jobLevel 'contents' permission set to 'read': .github/workflows/linux_container_tests.yml:289","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pr_title_checker.yml:21","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pr_title_checker.yml:22","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-please.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:62","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:75","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/targeted_tests.yml:86","Info: jobLevel 'contents' permission set to 'read': .github/workflows/targeted_tests.yml:87","Info: found token with 'none' permissions: .github/workflows/targeted_tests.yml:1","Info: found token with 'none' permissions: .github/workflows/test_selection.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:24","Info: jobLevel 'actions' permission set to 'read': .github/workflows/unit_tests.yml:100","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/unit_tests.yml:101","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit_tests.yml:35","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/unit_tests.yml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/workflow_lint.yml:15","Info: topLevel 'contents' permission set to 'read': .github/workflows/agent_metadata.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/all_solutions.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_buildtools.yml:14","Info: topLevel 'packages' permission set to 'read': .github/workflows/build_download_site_index_files.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_download_site_index_files.yml:47","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_profiler.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/check_modified_files.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:15","Info: topLevel 'contents' permission set to 'read': .github/workflows/compare_performance.yml:159","Info: topLevel 'actions' permission set to 'read': .github/workflows/compare_performance.yml:160","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependabot_ci_dispatch.yml:41","Info: found token with 'none' permissions: .github/workflows/dependabot_ci_trigger.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy-k8s-unboundedservices.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy_agent.yml:49","Info: topLevel 'packages' permission set to 'read': .github/workflows/deploy_agent.yml:50","Info: topLevel 'actions' permission set to 'read': .github/workflows/deploy_siteextension.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy_siteextension.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/dotty.yml:25","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration_tests.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/linux_container_tests.yml:46","Info: topLevel 'contents' permission set to 'read': .github/workflows/markdowncheck.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/post_deploy_agent.yml:36","Info: topLevel 'packages' permission set to 'read': .github/workflows/post_deploy_agent.yml:37","Info: found token with 'none' permissions: .github/workflows/pr_title_checker.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish_release_notes.yml:26","Info: topLevel 'packages' permission set to 'read': .github/workflows/publish_release_notes.yml:27","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-please.yml:12","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/set_community_label.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/siteextension_release.yml:14","Info: found token with 'none' permissions: .github/workflows/targeted_tests.yml:1","Info: found token with 'none' permissions: .github/workflows/test_selection.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/unbounded_tests.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/unit_tests.yml:27","Info: found token with 'none' permissions: .github/workflows/workflow_lint.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: build/Tools/NUnit-Console/Mono.Cecil.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit-project-loader.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit-v2-result-writer.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit.core.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit.core.interfaces.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/nunit.v2.driver.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/teamcity-event-listener.dll:1","Warn: binary detected: build/Tools/NUnit-Console/addins/vs-project-loader.dll:1","Warn: binary detected: build/Tools/NUnit-Console/nunit-agent-x86.exe:1","Warn: binary detected: build/Tools/NUnit-Console/nunit-agent.exe:1","Warn: binary detected: build/Tools/NUnit-Console/nunit.engine.api.dll:1","Warn: binary detected: build/Tools/NUnit-Console/nunit.engine.dll:1","Warn: binary detected: build/Tools/NUnit-Console/nunit3-console.exe:1","Warn: binary detected: build/Tools/NuGet/nuget.exe:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.abstractions.dll:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.console.exe:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.console.x86.exe:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.runner.reporters.net452.dll:1","Warn: binary detected: build/Tools/XUnit-Console/xunit.runner.utility.net452.dll:1","Warn: binary detected: build/Tools/nuget.4.4.1.exe:1","Warn: binary detected: build/Tools/nuget.exe:1","Warn: binary detected: build/Tools/sqlncli.msi:1","Warn: binary detected: build/Tools/vswhere.exe:1","Warn: binary detected: build/Tools/xsd2code/Xsd2Code.Library.dll:1","Warn: binary detected: build/Tools/xsd2code/Xsd2Code.exe:1","Warn: binary detected: tests/Agent/IntegrationTests/ExternalLibs/NewRelic.Api.Agent.dll:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: SAST configuration detected: CodeQL","Warn: 6 commits out of 30 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build_profiler.yml:350"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: https://osv.dev/GHSA-3rq8-h3gj-r5c6","Warn: Project is vulnerable to: https://osv.dev/GHSA-hxrm-9w7p-39cc"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities","short":"Determines if the project has open, known unfixed vulnerabilities."}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: 'last push approval' is required to merge on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/newrelic/.github/SECURITY.md:1","Info: Found linked content: github.com/newrelic/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/newrelic/.github/SECURITY.md:1","Info: Found text in security policy: github.com/newrelic/.github/SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests","short":"Determines if the project runs tests before pull requests are merged."}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/agent_metadata.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/agent_metadata.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy_agent.yml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/deploy_agent.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy_agent.yml:466: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/deploy_agent.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy_agent.yml:491: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/newrelic-dotnet-agent/deploy_agent.yml/main?enable=pin","Warn: containerImage not pinned by hash: build/Linux/build/deb/Dockerfile:1: pin your Docker image by updating debian:stable to debian:stable@sha256:7fa362f5e7c036d7f45621a6c721c03493cdcb5889adfcd65587759e34fe4c6f","Warn: containerImage not pinned by hash: src/Agent/NewRelic/Profiler/linux/DebugDockerfile:3: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:20","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/AwsSdkTestApp/Dockerfile:23","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/CustomBaseContainerBuild/Dockerfile.CustomBaseImage:2","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/KafkaTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MassTransitTestApp/Dockerfile:26","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/MemcachedTestApp/Dockerfile:27","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:20","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile:23","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:7","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:12","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.amazon:25","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:4: pin your Docker image by updating quay.io/centos/centos:stream9 to quay.io/centos/centos:stream9@sha256:7d3c87ab567add60d0153a6a17bc10d0f19cd982a2d533724298ebd1ee751eab","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:9","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:19","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.centos:22","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:6","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:11","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:21","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/SmokeTestApp/Dockerfile.fedora:24","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:5","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:10","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:20","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/W3CTestApp/Dockerfile:23","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/cosmosdb/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:latest to mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:latest@sha256:50e0086d6171874ee136458d80f413f423a01ef56b1a6009d8628cc1bd1ad4ce","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/elastic7/Dockerfile:2: pin your Docker image by updating elasticsearch:7.17.10 to elasticsearch:7.17.10@sha256:43b9e781ebb2bd731ea3966bb816edce947e34965676046b3c0f8c17318cee72","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/elastic8/Dockerfile:1: pin your Docker image by updating elasticsearch:8.6.2 to elasticsearch:8.6.2@sha256:93bc71907ca0e6e3b4f181e0dc850b90bb6cb2686c2778def0b8542398983c28","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/elastic9/Dockerfile:1: pin your Docker image by updating elasticsearch:9.0.4 to elasticsearch:9.0.4@sha256:abbb10c17bf4259b3c44bb970a40fc231ad969052a58fcdcc9008fe75b1f9960","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mongodb32/Dockerfile:1: pin your Docker image by updating mongo:3.2 to mongo:3.2@sha256:0463a91d8eff189747348c154507afc7aba045baa40e8d58d8a4c798e71001f3","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mongodb60/Dockerfile:1: pin your Docker image by updating mongo:6.0.27 to mongo:6.0.27@sha256:03cda579c8caad6573cb98c2b3d5ff5ead452a6450561129b89595b4b9c18de2","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mssql/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/mssql/server:2022-latest to mcr.microsoft.com/mssql/server:2022-latest@sha256:97b448857967be55e005424a660056fe6d51814435804dc07e8f79f028bab5fb","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/mysql/Dockerfile:1: pin your Docker image by updating mysql:lts to mysql:lts@sha256:b2cf29815e62fea06b7de22b8b8e57dfe0eb32706e38ce951930bde6faef4ab6","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/oracle/Dockerfile:1: pin your Docker image by updating container-registry.oracle.com/database/free:latest-lite to container-registry.oracle.com/database/free:latest-lite@sha256:cf540c3fa190d7cffad08c491652ac07fc70314e510f6b87890449517d565e94","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/postgres/Dockerfile:1: pin your Docker image by updating postgres:15 to postgres:15@sha256:9b1d34adbce1dd07ee6e94b4a2cf698884b89bd44a6c9c12f5da8f3acbfe4957","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/rabbitmq/Dockerfile:1: pin your Docker image by updating rabbitmq:3.9.5 to rabbitmq:3.9.5@sha256:3b3f7b55be78e1b3c7330671ffc3f5e3670f66f040a4a429109a7f56c90464dc","Warn: containerImage not pinned by hash: tests/Agent/IntegrationTests/UnboundedServices/redis/Dockerfile:1: pin your Docker image by updating redis:6.2.5 to redis:6.2.5@sha256:c98f0230b5f1831f4f5dd764c4ea8ef11d3e3a1a3593278eb952373d97c82b27","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/PerformanceTestApp/Dockerfile:13: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:10.0 to mcr.microsoft.com/dotnet/aspnet:10.0@sha256:1fe86375600b62e6566b465da9553eef0621f13c67f40fe764cd8dbb1dee1497","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/ReportGenerator/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:10.0 to mcr.microsoft.com/dotnet/sdk:10.0@sha256:4ea6fe75dd36706bb6d8c3c293d4c4315840f5d76ea28ac97def77e3ec487fa5","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/ReportGenerator/Dockerfile:8: pin your Docker image by updating mcr.microsoft.com/dotnet/runtime:10.0 to mcr.microsoft.com/dotnet/runtime:10.0@sha256:399e54a8a7e35c3aba78398b2840455d45185cba20b831b8a2b46f849f4f5001","Warn: containerImage not pinned by hash: tests/Agent/PerformanceTests/TrafficDriver/Dockerfile:1: pin your Docker image by updating python:3.12-slim to python:3.12-slim@sha256:78387bc3881b8273120a12ebe6c1ab22b018ccc2c9adf565ae1ac9b536e184ea","Warn: downloadThenRun not pinned by hash: tests/Agent/IntegrationTests/ContainerApplications/CustomBaseContainerBuild/Dockerfile.CustomBaseImage:16","Warn: pipCommand not pinned by hash: tests/Agent/PerformanceTests/TrafficDriver/Dockerfile:6","Warn: downloadThenRun not pinned by hash: deploy/linux/deploy_scripts/libexec/jenkins-download.bash:92","Warn: pipCommand not pinned by hash: .github/workflows/workflow_lint.yml:28","Info: 129 out of 129 GitHub-owned GitHubAction dependencies pinned","Info:  67 out of  71 third-party GitHubAction dependencies pinned","Info:  12 out of  67 containerImage dependencies pinned","Info:  14 out of  14 nugetCommand dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}},{"name":"Contributors","score":10,"reason":"project has 7 contributing companies or organizations","details":["Info: found contributions from: Faithlife, LogosBible, faithlife, mysql-net, new relic, newrelic, open-telemetry"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors","short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies)."}}]}