{"date":"2026-08-17","repo":{"name":"github.com/vdaas/vald","commit":"3cd61c052de602e0eb5f5a2d16baaefb5dff10c1"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":6.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/_detect-ci-container.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image-scan.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:49","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:59","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/_docker-image.yaml:147","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:146","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:227","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:290","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_release-pr.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_release-pr.yaml:52","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_release-pr.yaml:57","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_update-protobuf.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/backport.yaml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/backport.yaml:41","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-binaries.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-binaries.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-binaries.yaml:39","Info: jobLevel 'actions' permission set to 'read': .github/workflows/build-binaries.yaml:66","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-binaries.yaml:67","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-protobuf.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-protobuf.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-protobuf.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops-help.yaml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops-help.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:44","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:55","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:108","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:184","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:294","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:422","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-conflict.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-conflict.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:51","Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql-analysis.yml:63","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:64","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:42","Info: jobLevel 'contents' permission set to 'read': .github/workflows/coverage.yaml:46","Info: jobLevel 'contents' permission set to 'read': .github/workflows/coverage.yaml:51","Info: jobLevel 'contents' permission set to 'read': .github/workflows/coverage.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-internal-config-changes.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-internal-config-changes.yaml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-faiss-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-faiss-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-ngt-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-ngt-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-sidecar-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-sidecar-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-benchmark-job-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-benchmark-job-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-benchmark-operator-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-benchmark-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-binfmt-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-binfmt-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-buildbase-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-buildbase-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-buildkit-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-buildkit-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-buildkit-syft-scanner-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-buildkit-syft-scanner-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-dev-container-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-dev-container-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-discoverer-k8s-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-discoverer-k8s-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-e2e-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-e2e-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-example-client-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-example-client-image.yaml:29","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-gateway-filter-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-gateway-filter-image.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-gateway-lb-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-gateway-lb-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-gateway-mirror-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-gateway-mirror-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-helm-operator-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-helm-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:63","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:81","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:129","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:57","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:75","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:93","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:111","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:123","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:99","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:105","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:51","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:69","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:87","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-correction-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-correction-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-creation-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-creation-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-deletion-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-deletion-image.yaml:29","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-exportation-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-exportation-image.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-operator-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-save-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-save-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-manager-index-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-manager-index-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-operator-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-readreplica-rotate-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-readreplica-rotate-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:136","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:46","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:130","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:196","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:360","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:50","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/fossa.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/fossa.yaml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/fossa.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/github-actions-workflow-linter.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:111","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:42","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:47","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:77","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:42","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:87","Info: jobLevel 'contents' permission set to 'read': .github/workflows/issue-metrics.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yaml:113","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-hadolint.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-hadolint.yaml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:50","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:80","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:108","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:62","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:87","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:69","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-major-minor.yaml:27","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-major-minor.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-major-minor.yaml:106","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-patch.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-patch.yaml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-patch.yaml:81","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test-hack.yaml:62","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test-hack.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test-hack.yaml:57","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test-rust.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test-rust.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test-rust.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:53","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:58","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:83","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:108","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:44","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-deps.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-deps.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-deps.yaml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:47","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:56","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-pull-request-and-issue-template.yaml:30","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-pull-request-and-issue-template.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-web-docs.yaml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test-e2e.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test-e2e.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test-e2e.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test.yaml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test.yaml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test.yaml:40","Warn: no topLevel permission defined: .github/workflows/_detect-ci-container.yaml:1","Warn: no topLevel permission defined: .github/workflows/_docker-image-scan.yaml:1","Warn: no topLevel permission defined: .github/workflows/_docker-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/_release-pr.yaml:1","Warn: no topLevel permission defined: .github/workflows/_update-protobuf.yaml:1","Warn: no topLevel permission defined: .github/workflows/backport.yaml:1","Warn: no topLevel permission defined: .github/workflows/build-binaries.yaml:1","Warn: no topLevel permission defined: .github/workflows/build-protobuf.yaml:1","Warn: no topLevel permission defined: .github/workflows/chatops-help.yaml:1","Warn: no topLevel permission defined: .github/workflows/chatops.yaml:1","Warn: no topLevel permission defined: .github/workflows/check-conflict.yaml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/coverage.yaml:1","Warn: no topLevel permission defined: .github/workflows/detect-internal-config-changes.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-faiss-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-ngt-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-sidecar-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-benchmark-job-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-benchmark-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-binfmt-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-buildbase-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-buildkit-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-buildkit-syft-scanner-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-dev-container-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-discoverer-k8s-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-e2e-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-example-client-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-gateway-filter-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-gateway-lb-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-gateway-mirror-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-helm-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-image-scan.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-correction-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-creation-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-deletion-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-exportation-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-save-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-manager-index-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-readreplica-rotate-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e-max-dim.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.v2.yaml:1","Warn: no topLevel permission defined: .github/workflows/format.yaml:1","Warn: no topLevel permission defined: .github/workflows/fossa.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/github-actions-workflow-linter.yaml:24","Warn: no topLevel permission defined: .github/workflows/helm-lint.yaml:1","Warn: no topLevel permission defined: .github/workflows/helm.yaml:1","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/issue-metrics.yaml:28","Warn: no topLevel permission defined: .github/workflows/labeler.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog-hadolint.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog-k8s.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog-markdown.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog.yaml:1","Warn: no topLevel permission defined: .github/workflows/semver-major-minor.yaml:1","Warn: no topLevel permission defined: .github/workflows/semver-patch.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-hack.yaml:1","Warn: no topLevel permission defined: .github/workflows/unit-test-rust.yaml:1","Warn: no topLevel permission defined: .github/workflows/unit-test.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-deps.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-protobuf.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-pull-request-and-issue-template.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-web-docs.yaml:1","Warn: no topLevel permission defined: .github/workflows/vald-operator-test-e2e.yaml:1","Warn: no topLevel permission defined: .github/workflows/vald-operator-test.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.7.17 not signed: https://api.github.com/repos/vdaas/vald/releases/229983746","Warn: release artifact v1.7.16 not signed: https://api.github.com/repos/vdaas/vald/releases/192199769","Warn: release artifact v1.7.15 not signed: https://api.github.com/repos/vdaas/vald/releases/189091241","Warn: release artifact v1.7.14 not signed: https://api.github.com/repos/vdaas/vald/releases/179601800","Warn: release artifact v1.7.13 not signed: https://api.github.com/repos/vdaas/vald/releases/168923027","Warn: release artifact v1.7.17 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/229983746","Warn: release artifact v1.7.16 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/192199769","Warn: release artifact v1.7.15 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/189091241","Warn: release artifact v1.7.14 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/179601800","Warn: release artifact v1.7.13 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/168923027"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/e2e.v2.yaml:127"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":4,"reason":"dependency not pinned by hash detected -- score normalized to 4","details":["Warn: containerImage not pinned by hash: dockers/agent/core/agent/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/agent/core/agent/Dockerfile:100: pin your Docker image by updating gcr.io/distroless/cc-debian12:nonroot to gcr.io/distroless/cc-debian12:nonroot@sha256:adcd20c7b4c988b73cbfbddb26d2eee574571e6d7c9ffea29b3821e0690efb77","Warn: containerImage not pinned by hash: dockers/agent/core/faiss/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/agent/core/faiss/Dockerfile:98: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/agent/core/ngt/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/agent/core/ngt/Dockerfile:98: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/agent/sidecar/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/agent/sidecar/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/binfmt/Dockerfile:21: pin your Docker image by updating tonistiigi/binfmt:master to tonistiigi/binfmt:master@sha256:cb6f8414d175d89827a64e5cdd045cbb72142e8e51765005f532b31b7b45c801","Warn: containerImage not pinned by hash: dockers/buildbase/Dockerfile:21: pin your Docker image by updating ubuntu:latest to ubuntu:latest@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b","Warn: containerImage not pinned by hash: dockers/buildkit/Dockerfile:21: pin your Docker image by updating moby/buildkit:master to moby/buildkit:master@sha256:6aebb303ac06aa6f8f4ffef453b5e269b08e3ee1f34d895fc7f90cbe88b95f31","Warn: containerImage not pinned by hash: dockers/buildkit/syft/scanner/Dockerfile:21: pin your Docker image by updating docker/buildkit-syft-scanner:edge to docker/buildkit-syft-scanner:edge@sha256:74beded4b4146d730c8da436c10651a14d8b99cdba368311a0bbf4fae8abd9d4","Warn: containerImage not pinned by hash: dockers/dev/Dockerfile:22: pin your Docker image by updating mcr.microsoft.com/devcontainers/base:ubuntu24.04 to mcr.microsoft.com/devcontainers/base:ubuntu24.04@sha256:cfd5dd36c0d0d88de015aad5aa4f4b94e76d9f658a1e3055b27fd7d0fd1d84a6","Warn: containerImage not pinned by hash: dockers/discoverer/k8s/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/discoverer/k8s/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/example/client/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/example/client/Dockerfile:92: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/gateway/filter/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/gateway/filter/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/gateway/lb/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/gateway/lb/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/gateway/mirror/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/gateway/mirror/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/index/job/correction/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/index/job/correction/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/index/job/creation/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/index/job/creation/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/index/job/deletion/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/index/job/deletion/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/index/job/exportation/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/index/job/exportation/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/index/job/readreplica/rotate/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/index/job/readreplica/rotate/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/index/job/save/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/index/job/save/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/index/operator/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/index/operator/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/manager/index/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/manager/index/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/operator/benchmark/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/operator/benchmark/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/operator/helm/Dockerfile:23: pin your Docker image by updating quay.io/operator-framework/helm-operator:latest to quay.io/operator-framework/helm-operator:latest@sha256:9443848cb8d390e4e0ea3492b6439c6eb34bca048a80f3313fc48b04d1544c6a","Warn: containerImage not pinned by hash: dockers/operator/helm/Dockerfile:25: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/operator/helm/Dockerfile:105: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/operator/vald/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/operator/vald/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/tests/v2/e2e/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/tests/v2/e2e/Dockerfile:92: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: dockers/tools/benchmark/job/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:4e01adf593babf7a3a2842b9fa288e8a91c74abe00c0019d77b70d7cdbb7d079","Warn: containerImage not pinned by hash: dockers/tools/benchmark/job/Dockerfile:92: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: downloadThenRun not pinned by hash: .github/workflows/coverage.yaml:79","Warn: goCommand not pinned by hash: .github/workflows/e2e-max-dim.yaml:68","Warn: goCommand not pinned by hash: .github/workflows/e2e-max-dim.yaml:69","Info:  95 out of  95 GitHub-owned GitHubAction dependencies pinned","Info:  24 out of  24 third-party GitHubAction dependencies pinned","Info:   0 out of  50 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}