{"id":30782168,"url":"https://github.com/arassec/igor","last_synced_at":"2026-04-16T12:01:32.521Z","repository":{"id":35914402,"uuid":"113739417","full_name":"arassec/igor","owner":"arassec","description":"Manage 'Continuous Workarounds' in a reliable way...","archived":false,"fork":false,"pushed_at":"2026-04-06T19:32:35.000Z","size":14777,"stargazers_count":1,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-04-06T21:23:06.948Z","etag":null,"topics":["java","low-code","spring-boot"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/arassec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-12-10T09:56:39.000Z","updated_at":"2026-04-06T19:32:39.000Z","dependencies_parsed_at":"2024-02-09T16:51:24.539Z","dependency_job_id":"161f8b00-8240-4f33-8431-69c9c01ec0de","html_url":"https://github.com/arassec/igor","commit_stats":null,"previous_names":[],"tags_count":27,"template":false,"template_full_name":null,"purl":"pkg:github/arassec/igor","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arassec%2Figor","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arassec%2Figor/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arassec%2Figor/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arassec%2Figor/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/arassec","download_url":"https://codeload.github.com/arassec/igor/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/arassec%2Figor/sbom","scorecard":{"id":205186,"data":{"date":"2025-08-11","repo":{"name":"github.com/arassec/igor","commit":"a8217c1e445e5a3a12217057f55f38a9f2af1a0f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/8 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: topLevel 'contents' permission set to 'write': .github/workflows/build.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/arassec/igor/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/arassec/igor/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/arassec/igor/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/arassec/igor/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/arassec/igor/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/arassec/igor/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/arassec/igor/release.yml/main?enable=pin","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:10"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.7.1 not signed: https://api.github.com/repos/arassec/igor/releases/237063665","Warn: release artifact v0.7.0 not signed: https://api.github.com/repos/arassec/igor/releases/223604550","Warn: release artifact v0.6.8 not signed: https://api.github.com/repos/arassec/igor/releases/124170094","Warn: release artifact v0.6.6 not signed: https://api.github.com/repos/arassec/igor/releases/89800207","Warn: release artifact v0.6.5 not signed: https://api.github.com/repos/arassec/igor/releases/88234613","Warn: release artifact v0.7.1 does not have provenance: https://api.github.com/repos/arassec/igor/releases/237063665","Warn: release artifact v0.7.0 does not have provenance: https://api.github.com/repos/arassec/igor/releases/223604550","Warn: release artifact v0.6.8 does not have provenance: https://api.github.com/repos/arassec/igor/releases/124170094","Warn: release artifact v0.6.6 does not have provenance: https://api.github.com/repos/arassec/igor/releases/89800207","Warn: release artifact v0.6.5 does not have provenance: https://api.github.com/repos/arassec/igor/releases/88234613"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":10,"reason":"SAST tool detected","details":["Info: SAST configuration detected: Sonar","Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"23 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5","Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp","Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq","Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr","Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765","Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-5j4c-8p2g-v4jx","Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx","Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-16T23:34:29.840Z","repository_id":35914402,"created_at":"2025-08-16T23:34:29.840Z","updated_at":"2025-08-16T23:34:29.840Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31884929,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-16T11:36:10.202Z","status":"ssl_error","status_checked_at":"2026-04-16T11:36:09.652Z","response_time":69,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["java","low-code","spring-boot"],"created_at":"2025-09-05T09:05:55.005Z","updated_at":"2026-04-16T12:01:32.501Z","avatar_url":"https://github.com/arassec.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# \u003cimg src=\"https://raw.githubusercontent.com/arassec/igor/main/documentation/docs/.vuepress/public/logo.png\" width=\"256\"\u003e [![Build Status](https://github.com/arassec/igor/workflows/Build/badge.svg?branch=main)](https://github.com/arassec/igor/actions?query=workflow%3ABuild)  [![Quality Gate](https://img.shields.io/sonar/quality_gate/arassec_igor?server=http%3A%2F%2Fsonarcloud.io)](https://sonarcloud.io/dashboard?id=arassec_igor) [![Code Coverage](https://img.shields.io/sonar/coverage/arassec_igor?server=http%3A%2F%2Fsonarcloud.io)](https://sonarcloud.io/component_measures?id=arassec_igor\u0026metric=coverage\u0026view=treemap) [![Maven Build Status](https://maven-badges.herokuapp.com/maven-central/com.arassec.igor/application/badge.svg)](https://maven-badges.herokuapp.com/maven-central/com.arassec.igor/application)\n\n## About\n\nIgor is a tool for managing 'continuous workarounds'.\n\nIt provides an easy to use, reliable place where you can put all those workarounds, which would\notherwise be solved by scattered scripts or code fragments across your applications and services.\n\nIt is similar to [Node-RED](https://nodered.org/), [Huginn](https://github.com/huginn/huginn)\nor [Beehive](https://github.com/muesli/beehive),\ni.e. it provides a \"low-code\" environment for developers.\n\nIt's written in Java using [Spring Boot](https://spring.io/projects/spring-boot) and provides an easy-to-use\nweb-frontend written in [vue.js](https://vuejs.org/).\n\n## What can it do?\n\nContinuous workarounds are configured in igor using **jobs**.\n\nA job ist triggered by a **trigger**, e.g. a CRON trigger starting the job at a regular interval or an event that is\nreceived by the trigger.\nThe trigger creates an initial data item to start the job.\n\nThe data item is passed to different, configurable **actions**, that modify the data to the user's needs.\nActions can also be used to load data from, or store modified data items in, external services using **connectors** for\nthese services..\n\n\u003cbr/\u003e\n\n![igor overview image](https://raw.githubusercontent.com/arassec/igor/main/documentation/docs/overview.png)\n\n## Quick Start\n\nInstall igor using docker:\n\n``` sh\n# use docker to get the latest, stable version:\ndocker run --name igor -p8080:8080 arassec/igor\n```\n\nIgor's web interface should now be available at: [http://localhost:8080](http://localhost:8080)\n\n## Connectors\n\nThere are currently builtin connectors for the following protocols and services:\n\n* **File Handling**\n    * FTP\n    * FTPS\n    * Local\n    * SCP\n    * SFTP\n* **Messaging**\n    * RabbitMQ\n    * E-Mail\n* **Web**\n    * HTTP(S)\n* **Data**\n    * H2\n    * PostgreSQL\n    * Oracle\n    * IBM DB2\n    * Microsoft SQL Server\n\nYou can easily add new connectors by creating a Spring-Boot application and using the `igor-spring-boot-starter` as\ndescribed in the documentation.\n\n## Reference Documentation\n\nThe reference documentation is distributed within the igor application.\nThe documentation of the latest, **stable** release is also available online at:\n\n[Igor Reference Documentation](https://arassec.github.io/igor/)\n\n## License\n\nThis project is licensed under the [MIT License](https://github.com/arassec/igor/blob/main/LICENSE)","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farassec%2Figor","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Farassec%2Figor","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farassec%2Figor/lists"}