{"date":"2026-10-05","repo":{"name":"github.com/vdaas/vald","commit":"39860c01f79ec09c94ecc585b874550ceed5c2c5"},"scorecard":{"version":"v5.5.1-0.20260928043300-ac4b58443938","commit":"ac4b584439389e57f8d56d925f7fef245d8dda1f"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Maintained","score":10,"reason":"21 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/_detect-ci-container.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image-scan.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:146","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/_docker-image.yaml:147","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:227","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:290","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:49","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_docker-image.yaml:59","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_release-pr.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_release-pr.yaml:52","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_release-pr.yaml:57","Info: jobLevel 'contents' permission set to 'read': .github/workflows/_update-protobuf.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/backport.yaml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/backport.yaml:41","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-binaries.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-binaries.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-binaries.yaml:39","Info: jobLevel 'actions' permission set to 'read': .github/workflows/build-binaries.yaml:66","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-binaries.yaml:67","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-protobuf.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-protobuf.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-protobuf.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops-help.yaml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops-help.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:422","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:44","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:55","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:108","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:184","Info: jobLevel 'contents' permission set to 'read': .github/workflows/chatops.yaml:294","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-conflict.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-conflict.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:51","Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql-analysis.yml:63","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:64","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:42","Info: jobLevel 'contents' permission set to 'read': .github/workflows/coverage.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/coverage.yaml:46","Info: jobLevel 'contents' permission set to 'read': .github/workflows/coverage.yaml:51","Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-internal-config-changes.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-internal-config-changes.yaml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-faiss-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-faiss-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-ngt-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-ngt-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-agent-sidecar-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-agent-sidecar-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-benchmark-job-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-benchmark-job-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-benchmark-operator-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-benchmark-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-binfmt-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-binfmt-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-buildbase-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-buildbase-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-buildkit-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-buildkit-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-buildkit-syft-scanner-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-buildkit-syft-scanner-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-dev-container-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-dev-container-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-discoverer-k8s-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-discoverer-k8s-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-e2e-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-e2e-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-example-client-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-example-client-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-gateway-filter-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-gateway-filter-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-gateway-lb-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-gateway-lb-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-gateway-mirror-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-gateway-mirror-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-helm-operator-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-helm-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:57","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:105","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:129","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:75","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:81","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:87","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:111","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:123","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:51","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:63","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:93","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:99","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-image-scan.yaml:69","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-correction-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-correction-image.yaml:29","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-creation-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-creation-image.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-deletion-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-deletion-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-exportation-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-exportation-image.yaml:29","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-operator-image.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-index-save-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-index-save-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-manager-index-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-manager-index-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-operator-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-operator-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dockers-readreplica-rotate-image.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/dockers-readreplica-rotate-image.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:46","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-max-dim.yaml:136","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:360","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:50","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:130","Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e.v2.yaml:196","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/format.yaml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/fossa.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/fossa.yaml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/fossa.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/github-actions-workflow-linter.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:42","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:47","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:77","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm-lint.yaml:111","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:87","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/helm.yaml:42","Info: jobLevel 'contents' permission set to 'read': .github/workflows/issue-metrics.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yaml:113","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-hadolint.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-hadolint.yaml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:50","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:80","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-k8s.yaml:108","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:62","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog-markdown.yaml:87","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:69","Info: jobLevel 'contents' permission set to 'read': .github/workflows/reviewdog.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-major-minor.yaml:27","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-major-minor.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-major-minor.yaml:106","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-patch.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-patch.yaml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semver-patch.yaml:81","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test-hack.yaml:57","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test-hack.yaml:62","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test-hack.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test-rust.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test-rust.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test-rust.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:53","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:58","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:83","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:108","Info: jobLevel 'contents' permission set to 'read': .github/workflows/unit-test.yaml:44","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-deps.yaml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-deps.yaml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-deps.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:47","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-protobuf.yaml:56","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-pull-request-and-issue-template.yaml:30","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-pull-request-and-issue-template.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-web-docs.yaml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test-e2e.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test-e2e.yaml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test-e2e.yaml:48","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test.yaml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test.yaml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/vald-operator-test.yaml:31","Warn: no topLevel permission defined: .github/workflows/_detect-ci-container.yaml:1","Warn: no topLevel permission defined: .github/workflows/_docker-image-scan.yaml:1","Warn: no topLevel permission defined: .github/workflows/_docker-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/_release-pr.yaml:1","Warn: no topLevel permission defined: .github/workflows/_update-protobuf.yaml:1","Warn: no topLevel permission defined: .github/workflows/backport.yaml:1","Warn: no topLevel permission defined: .github/workflows/build-binaries.yaml:1","Warn: no topLevel permission defined: .github/workflows/build-protobuf.yaml:1","Warn: no topLevel permission defined: .github/workflows/chatops-help.yaml:1","Warn: no topLevel permission defined: .github/workflows/chatops.yaml:1","Warn: no topLevel permission defined: .github/workflows/check-conflict.yaml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/coverage.yaml:1","Warn: no topLevel permission defined: .github/workflows/detect-internal-config-changes.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-faiss-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-ngt-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-agent-sidecar-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-benchmark-job-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-benchmark-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-binfmt-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-buildbase-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-buildkit-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-buildkit-syft-scanner-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-dev-container-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-discoverer-k8s-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-e2e-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-example-client-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-gateway-filter-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-gateway-lb-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-gateway-mirror-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-helm-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-image-scan.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-correction-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-creation-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-deletion-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-exportation-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-index-save-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-manager-index-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-operator-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/dockers-readreplica-rotate-image.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e-max-dim.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.v2.yaml:1","Warn: no topLevel permission defined: .github/workflows/format.yaml:1","Warn: no topLevel permission defined: .github/workflows/fossa.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/github-actions-workflow-linter.yaml:24","Warn: no topLevel permission defined: .github/workflows/helm-lint.yaml:1","Warn: no topLevel permission defined: .github/workflows/helm.yaml:1","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/issue-metrics.yaml:28","Warn: no topLevel permission defined: .github/workflows/labeler.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog-hadolint.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog-k8s.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog-markdown.yaml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog.yaml:1","Warn: no topLevel permission defined: .github/workflows/semver-major-minor.yaml:1","Warn: no topLevel permission defined: .github/workflows/semver-patch.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-hack.yaml:1","Warn: no topLevel permission defined: .github/workflows/unit-test-rust.yaml:1","Warn: no topLevel permission defined: .github/workflows/unit-test.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-deps.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-protobuf.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-pull-request-and-issue-template.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-web-docs.yaml:1","Warn: no topLevel permission defined: .github/workflows/vald-operator-test-e2e.yaml:1","Warn: no topLevel permission defined: .github/workflows/vald-operator-test.yaml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.8.0 not signed: https://api.github.com/repos/vdaas/vald/releases/376909833","Warn: release artifact v1.7.17 not signed: https://api.github.com/repos/vdaas/vald/releases/229983746","Warn: release artifact v1.7.16 not signed: https://api.github.com/repos/vdaas/vald/releases/192199769","Warn: release artifact v1.7.15 not signed: https://api.github.com/repos/vdaas/vald/releases/189091241","Warn: release artifact v1.7.14 not signed: https://api.github.com/repos/vdaas/vald/releases/179601800","Warn: release artifact v1.8.0 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/376909833","Warn: release artifact v1.7.17 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/229983746","Warn: release artifact v1.7.16 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/192199769","Warn: release artifact v1.7.15 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/189091241","Warn: release artifact v1.7.14 does not have provenance: https://api.github.com/repos/vdaas/vald/releases/179601800"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/e2e.v2.yaml:127"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Pinned-Dependencies","score":4,"reason":"dependency not pinned by hash detected -- score normalized to 4","details":["Warn: containerImage not pinned by hash: dockers/agent/core/agent/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/agent/core/agent/Dockerfile:100: pin your Docker image by updating gcr.io/distroless/cc-debian12:nonroot to gcr.io/distroless/cc-debian12:nonroot@sha256:9dac0a79194e45a7da0158a9c6da57b217585af0786db3845d1f0ec1a0dd182f","Warn: containerImage not pinned by hash: dockers/agent/core/faiss/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/agent/core/faiss/Dockerfile:98: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/agent/core/ngt/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/agent/core/ngt/Dockerfile:98: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/agent/sidecar/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/agent/sidecar/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/binfmt/Dockerfile:21: pin your Docker image by updating tonistiigi/binfmt:master to tonistiigi/binfmt:master@sha256:de293ee92375004d4b785bf906f563ea0e122354f7c2366aebfee55766093d69","Warn: containerImage not pinned by hash: dockers/buildbase/Dockerfile:21: pin your Docker image by updating ubuntu:latest to ubuntu:latest@sha256:f144425ff09be612d6d9ad965196e9cdc23dae1f42110a8a11a3e9a8198759f7","Warn: containerImage not pinned by hash: dockers/buildkit/Dockerfile:21: pin your Docker image by updating moby/buildkit:master to moby/buildkit:master@sha256:5b6a2e3c7fcd07f96af1d9af5600197779b79afd580a977c50473b10e8b15fe9","Warn: containerImage not pinned by hash: dockers/buildkit/syft/scanner/Dockerfile:21: pin your Docker image by updating docker/buildkit-syft-scanner:edge to docker/buildkit-syft-scanner:edge@sha256:d5186add4a2b220982de6302dbea009159af2010a0cb150939c9b26a0d78947a","Warn: containerImage not pinned by hash: dockers/dev/Dockerfile:22: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:534baea6a22c03a63003dbc8dbe78fe34bc0d7e595d9a9dc9834884ff530eb55","Warn: containerImage not pinned by hash: dockers/discoverer/k8s/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/discoverer/k8s/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/example/client/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/example/client/Dockerfile:92: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/gateway/filter/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/gateway/filter/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/gateway/lb/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/gateway/lb/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/gateway/mirror/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/gateway/mirror/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/index/job/correction/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/index/job/correction/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/index/job/creation/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/index/job/creation/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/index/job/deletion/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/index/job/deletion/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/index/job/exportation/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/index/job/exportation/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/index/job/readreplica/rotate/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/index/job/readreplica/rotate/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/index/job/save/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/index/job/save/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/index/operator/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/index/operator/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/manager/index/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/manager/index/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/operator/benchmark/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/operator/benchmark/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/operator/helm/Dockerfile:23: pin your Docker image by updating quay.io/operator-framework/helm-operator:latest to quay.io/operator-framework/helm-operator:latest@sha256:9443848cb8d390e4e0ea3492b6439c6eb34bca048a80f3313fc48b04d1544c6a","Warn: containerImage not pinned by hash: dockers/operator/helm/Dockerfile:25: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/operator/helm/Dockerfile:105: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/operator/vald/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/operator/vald/Dockerfile:85: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/tests/v2/e2e/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/tests/v2/e2e/Dockerfile:92: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: dockers/tools/benchmark/job/Dockerfile:22: pin your Docker image by updating ghcr.io/vdaas/vald/vald-buildbase:nightly to ghcr.io/vdaas/vald/vald-buildbase:nightly@sha256:a3632968cdb77719eb7dc9a93ecd9d54eb0bfab8c493a3bdbe7f1cd6f9ade4a7","Warn: containerImage not pinned by hash: dockers/tools/benchmark/job/Dockerfile:92: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: downloadThenRun not pinned by hash: .github/workflows/coverage.yaml:79","Warn: goCommand not pinned by hash: .github/workflows/e2e-max-dim.yaml:68","Warn: goCommand not pinned by hash: .github/workflows/e2e-max-dim.yaml:69","Info:  95 out of  95 GitHub-owned GitHubAction dependencies pinned","Info:  24 out of  24 third-party GitHubAction dependencies pinned","Info:   0 out of  50 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}}]}