{"id":13470434,"url":"https://github.com/bytecodealliance/wasm-micro-runtime","last_synced_at":"2026-06-29T05:01:02.106Z","repository":{"id":37663997,"uuid":"184654298","full_name":"bytecodealliance/wasm-micro-runtime","owner":"bytecodealliance","description":"WebAssembly Micro Runtime (WAMR)","archived":false,"fork":false,"pushed_at":"2026-06-26T02:31:21.000Z","size":30323,"stargazers_count":5996,"open_issues_count":582,"forks_count":820,"subscribers_count":103,"default_branch":"main","last_synced_at":"2026-06-26T04:20:00.247Z","etag":null,"topics":["aot","assembly-script","embedded","interpreter","iot","jit","pthread","runtime","sgx","wasi-nn","wasi-threads","wasm","wasm-socket","webassembly"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bytecodealliance.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-05-02T21:32:09.000Z","updated_at":"2026-06-26T03:05:36.000Z","dependencies_parsed_at":"2023-10-20T18:37:58.817Z","dependency_job_id":"15946a4d-5fa3-4dbe-85b2-fa9e8f2366fc","html_url":"https://github.com/bytecodealliance/wasm-micro-runtime","commit_stats":{"total_commits":2021,"total_committers":189,"mean_commits":"10.693121693121693","dds":0.7243938644235527,"last_synced_commit":"f2b87d773e88790fd2eac89d828f78836c219900"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/bytecodealliance/wasm-micro-runtime","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytecodealliance%2Fwasm-micro-runtime","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytecodealliance%2Fwasm-micro-runtime/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytecodealliance%2Fwasm-micro-runtime/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytecodealliance%2Fwasm-micro-runtime/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytecodealliance","download_url":"https://codeload.github.com/bytecodealliance/wasm-micro-runtime/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytecodealliance%2Fwasm-micro-runtime/sbom","scorecard":{"id":260282,"data":{"date":"2025-08-17T00:36:41Z","repo":{"name":"github.com/bytecodealliance/wasm-micro-runtime","commit":"14ced7c86ca144101fd5637dada360f79ab53039"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":6.3,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_docker_images.yml:25","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_iwasm_release.yml:104","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build_llvm_libraries.yml:43","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/build_llvm_libraries.yml:44","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_wamr_lldb.yml:55","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_wamr_lldb.yml:37","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_wamr_sdk.yml:45","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_wamr_vscode_ext.yml:24","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_wamr_wasi_extensions.yml:25","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build_wamrc.yml:41","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:44","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:45","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/compilation_on_android_ubuntu.yml:87","Info: jobLevel 'contents' permission set to 'read': .github/workflows/compilation_on_android_ubuntu.yml:86","Info: jobLevel 'contents' permission set to 'read': .github/workflows/compilation_on_android_ubuntu.yml:80","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/compilation_on_android_ubuntu.yml:81","Info: jobLevel 'contents' permission set to 'read': .github/workflows/compilation_on_macos.yml:64","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/compilation_on_macos.yml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/compilation_on_macos.yml:72","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/compilation_on_macos.yml:73","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/compilation_on_sgx.yml:68","Info: jobLevel 'contents' permission set to 'read': .github/workflows/compilation_on_sgx.yml:67","Info: jobLevel 'contents' permission set to 'read': .github/workflows/compilation_on_windows.yml:62","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/compilation_on_windows.yml:63","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/create_tag.yml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/nightly_run.yml:53","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/nightly_run.yml:54","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:47","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:115","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:127","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:177","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:205","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:256","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:52","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release_process.yml:103","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/release_process.yml:104","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:191","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:245","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release_process.yml:83","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/release_process.yml:84","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release_process.yml:93","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/release_process.yml:94","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:139","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:153","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:165","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:220","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:233","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release_process.yml:268","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/reuse_latest_release_binaries.yml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/spec_test_on_nuttx.yml:38","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/spec_test_on_nuttx.yml:39","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/spec_test_on_nuttx.yml:49","Info: jobLevel 'contents' permission set to 'read': .github/workflows/spec_test_on_nuttx.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_docker_images.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_iwasm_release.yml:91","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_llvm_libraries.yml:31","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_wamr_lldb.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_wamr_sdk.yml:39","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_wamr_vscode_ext.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_wamr_wasi_extensions.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/build_wamrc.yml:35","Info: topLevel 'contents' permission set to 'read': .github/workflows/check_version_h.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/coding_guidelines.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/compilation_on_android_ubuntu.yml:75","Info: topLevel 'contents' permission set to 'read': .github/workflows/compilation_on_macos.yml:59","Info: topLevel 'contents' permission set to 'read': .github/workflows/compilation_on_nuttx.yml:50","Info: topLevel 'contents' permission set to 'read': .github/workflows/compilation_on_sgx.yml:62","Info: topLevel 'contents' permission set to 'read': .github/workflows/compilation_on_windows.yml:57","Info: topLevel 'contents' permission set to 'read': .github/workflows/compilation_on_zephyr.yml:55","Info: topLevel 'contents' permission set to 'read': .github/workflows/create_tag.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/hadolint_dockerfiles.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/nightly_run.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/release_process.yml:42","Info: topLevel 'contents' permission set to 'read': .github/workflows/reuse_latest_release_binaries.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/spec_test_on_nuttx.yml:33","Info: topLevel 'contents' permission set to 'read': .github/workflows/supply_chain.yml:22","Warn: no topLevel permission defined: .github/workflows/wamr_wasi_extensions.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: tests/malformed/fuzz/1.wasm:1","Warn: binary detected: tests/malformed/fuzz/10.wasm:1","Warn: binary detected: tests/malformed/fuzz/11.wasm:1","Warn: binary detected: tests/malformed/fuzz/12.wasm:1","Warn: binary detected: tests/malformed/fuzz/2.wasm:1","Warn: binary detected: tests/malformed/fuzz/3.wasm:1","Warn: binary detected: tests/malformed/fuzz/4.wasm:1","Warn: binary detected: tests/malformed/fuzz/5.wasm:1","Warn: binary detected: tests/malformed/fuzz/6.wasm:1","Warn: binary detected: tests/malformed/fuzz/7.wasm:1","Warn: binary detected: tests/malformed/fuzz/8.wasm:1","Warn: binary detected: tests/malformed/fuzz/9.wasm:1","Warn: binary detected: tests/malformed/github/PoC47.wasm:1","Warn: binary detected: tests/malformed/github/PoC48.wasm:1","Warn: binary detected: tests/malformed/github/PoC49.wasm:1","Warn: binary detected: tests/malformed/github/PoC50.wasm:1","Warn: binary detected: tests/malformed/github/PoC51.wasm:1","Warn: binary detected: tests/malformed/github/PoC52.wasm:1","Warn: binary detected: tests/malformed/github/PoC53.wasm:1","Warn: binary detected: tests/malformed/github/PoC54.wasm:1","Warn: binary detected: tests/malformed/github/PoC55.wasm:1","Warn: binary detected: tests/malformed/github/PoC56.wasm:1","Warn: binary detected: tests/malformed/github/PoC57.wasm:1","Warn: binary detected: tests/malformed/github/PoC58.wasm:1","Warn: binary detected: tests/malformed/github/PoC59.wasm:1","Warn: binary detected: tests/malformed/github/PoC60.wasm:1","Warn: binary detected: tests/malformed/github/PoC61.wasm:1","Warn: binary detected: tests/malformed/github/PoC62.wasm:1","Warn: binary detected: tests/malformed/github/PoC63.wasm:1","Warn: binary detected: tests/malformed/github/PoC64.wasm:1","Warn: binary detected: tests/malformed/github/PoC65.wasm:1","Warn: binary detected: tests/malformed/github/PoC66.wasm:1","Warn: binary detected: tests/malformed/github/PoC67.wasm:1","Warn: binary detected: tests/malformed/github/PoC68.wasm:1","Warn: binary detected: tests/malformed/github/PoC69.wasm:1","Warn: binary detected: tests/malformed/github/PoC70.wasm:1","Warn: binary detected: tests/malformed/github/PoC71.wasm:1","Warn: binary detected: tests/malformed/github/PoC72.wasm:1","Warn: binary detected: tests/malformed/github/PoC73.wasm:1","Warn: binary detected: tests/malformed/github/PoC74.wasm:1","Warn: binary detected: tests/malformed/github/PoC75.wasm:1","Warn: binary detected: tests/malformed/github/PoC76.wasm:1","Warn: binary detected: tests/malformed/github/PoC77.wasm:1","Warn: binary detected: tests/malformed/github/PoC78.wasm:1","Warn: binary detected: tests/malformed/github/PoC79.wasm:1","Warn: binary detected: tests/malformed/github/PoC80.wasm:1","Warn: binary detected: tests/malformed/github/PoC81.wasm:1","Warn: binary detected: tests/malformed/github/PoC82.wasm:1","Warn: binary detected: tests/malformed/github/PoC83.wasm:1","Warn: binary detected: tests/malformed/github/PoC84.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-47/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-48/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-49/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-50/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-51/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-52/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-53/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-54/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-55/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-56/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-57/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-58/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-59/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-60/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-61/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-62/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-63/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-64/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-65/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-66/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-67/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-68/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-69/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-70/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-71/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-72/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-73/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-74/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-75/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-76/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-77/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-78/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-79/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-80/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-81/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-82/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-83/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues-deprecated/issue-84/PoC.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2700/filea151222.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2701/filea105944.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2702/filea105487.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2703/filea82785.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2704/filea1807.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2705/filea88124.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2706/filea142128.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-270801/filea3054_instr_instr.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-270802/filea3054.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2709/filea140961.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2710/t.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2711/filea214306.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2712/filea170022.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2713/filea105957.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2714/filea171655.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2720/filea228152.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2726/poc:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2732/filea9.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2759/case.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2784/6.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2787/sock_shutdown.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2790/232.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2797/v19_tcs_memory.init_647.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2829/filea262_9.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2832/filea5770.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2833/filea12287_4.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2847/filea1461_4.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2849/filea3891_2.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2857/10276.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2858/3605.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2861/filea7995_6.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2862/filea22861_5.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2863/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2865/filea4199_8.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2897/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-292001/f64.load_147_5_17034195850743225.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-292002/v128.load16x4_u_169_0_17034190656771224.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2921/v128.load64_lane_2635_10_1703418883268537.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2931/case.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2942/iwasm_jit_without_exception.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2943/iwasm_jit_timeout.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2944/iwasm_no_undeclared_function_reference.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2945/iwasm_fast_interp_moob_unhandled.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2946/iwasm_fast_interp_div_zero_unhandled.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2947/iwasm_fast_interp_int_overflow_double_free.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2948/iwasm_fast_interp_div_zero_double_free2.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2949/iwasm_fast_jit_unexpected_div_zero.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2950/iwasm_fast_jit_unexpected_moob.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2951/iwasm_fast_jit_unexpected_int_overflow.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2952/iwasm_fast_jit_unexpected_devide_by_zero.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2953/iwasm_fast_interp_unexpected_exception2.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2954/iwasm_jit_unexpected_exception_stack_underflow.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2955/iwasm_fast_interp_unexpected_value.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2956/iwasm_fast_interp_unexpected_value2.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2958/i64.gt_s_42.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2959/i64.gt_u_53.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2960/i64.lt_s_88.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2961/i64.le_u_73.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2962/i64.le_s_71.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2963/i64.ge_u_17.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2964/i64.ge_s_6.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2965/i64.shl_75.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-2966/i64.eq_63.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3020/all_wamr_memory.init_no_exception2.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3021/all_wamr_table.init_no_exception.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3022/wamr_jit_timeout.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3023/all_wamr_table.init_no_exception2.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3026/wamr_fast_interpreter_memory_oob.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3027/wamr_jit_memory_oob2.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3061/wamr_fast_interpreter_crash.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3062/wamr_fast_interpreter_wrong_float.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3090/wamr_fast_interpreter_SIGSEGV.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3122/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3123/fast_nterpreter_unexpected_MEMOOB.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3130/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3137/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-315101/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-315102/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3165/iwasm_jit_select_exception.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3170/iwasm_faster_interp_no_oom.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3210/3210.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3286/f32x4.add_66_116_17118879201058803.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3336/memory.init_2164_858_1712663578577073.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3337/f32x4.gt_55_571_17107906309149652.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3346/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3347/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3386/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3387/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3388/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3401/f64.const_6LLPBLPP_856_1714940342309342.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3402/tt_finterp_exceptionx.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3403/test.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3410/kotlin_wasm_wasi_example_wasm_wasi_prod.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3411/kotlin_wasm_wasi_example_wasm_wasi_dev.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3467/tt_unreachable.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3468/i64.add.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3491/nop_0LM_592_17171016522810388.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3513/iwasm_poc_04.wasm:1","Warn: binary detected: tests/regression/ba-issues/issues/issue-3514/iwasm_poc_05.wasm:1","Warn: binary detected: tests/standalone/bfs/bfs.wasm:1","Warn: binary detected: tests/standalone/binary-trees/binary_trees.wasm:1","Warn: binary detected: tests/standalone/blake3/blake3.wasm:1","Warn: binary detected: tests/standalone/brotli/brotli.wasm:1","Warn: binary detected: tests/standalone/c-ray/c_ray.wasm:1","Warn: binary detected: tests/standalone/c-wasm-simd128-example/c_wasm_simd128_example.wasm:1","Warn: binary detected: tests/standalone/cat-sync/cat_sync.wasm:1","Warn: binary detected: tests/standalone/coremark/coremark_wasi.wasm:1","Warn: binary detected: tests/standalone/coremark/coremark_wasi_nofp.wasm:1","Warn: binary detected: tests/standalone/dhrystone/dhrystone.wasm:1","Warn: binary detected: tests/standalone/fannkuch-redux/fannkuch_redux.wasm:1","Warn: binary detected: tests/standalone/fasta/fasta.wasm:1","Warn: binary detected: tests/standalone/gcc-loops/gcc_loops.wasm:1","Warn: binary detected: tests/standalone/hashset/HashSet.wasm:1","Warn: binary detected: tests/standalone/mandelbrot/mandel.wasm:1","Warn: binary detected: tests/standalone/mandelbrot/mandel_dd.wasm:1","Warn: binary detected: tests/standalone/nbody/nbody.wasm:1","Warn: binary detected: tests/standalone/raymarcher/raymarcher.wasm:1","Warn: binary detected: tests/standalone/simple/simple.wasm:1","Warn: binary detected: tests/standalone/smallpt/smallpt.wasm:1","Warn: binary detected: tests/standalone/smallpt/smallpt_ex.wasm:1","Warn: binary detected: tests/standalone/stream/stream.wasm:1","Warn: binary detected: tests/standalone/string-view/test_string.wasm:1","Warn: binary detected: tests/standalone/string-view/test_string_view.wasm:1","Warn: binary detected: tests/standalone/test-aes/test_aes.wasm:1","Warn: binary detected: tests/standalone/test-go/test_go.wasm:1","Warn: binary detected: tests/standalone/test-parson/test_parson.wasm:1","Warn: binary detected: tests/standalone/test-printf/test_printf_builtin.wasm:1","Warn: binary detected: tests/standalone/test-printf/test_printf_wasi.wasm:1","Warn: binary detected: tests/standalone/test-pthread/create_join.wasm:1","Warn: binary detected: tests/standalone/test-pthread/main_thread_return.wasm:1","Warn: binary detected: tests/standalone/test-pthread/pthread_cond.wasm:1","Warn: binary detected: tests/standalone/test-pthread/pthread_key.wasm:1","Warn: binary detected: tests/standalone/test-pthread/pthread_mutex.wasm:1","Warn: binary detected: tests/standalone/test-pthread/thread_cancel.wasm:1","Warn: binary detected: tests/standalone/test-pthread/thread_exit.wasm:1","Warn: binary detected: tests/standalone/test-pthread/wasi.wasm:1","Warn: binary detected: tests/standalone/test-stddef/test_stddef_cpp_5_1.wasm:1","Warn: binary detected: tests/standalone/test-ts1/test_ts1.wasm:1","Warn: binary detected: tests/standalone/tsf/tsf.wasm:1","Warn: binary detected: tests/unit/compilation/wasm-apps/main.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/func1.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/func2.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/global1.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/struct1.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/struct2.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/struct3.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/table1.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/test1.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/test2.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/test3.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/test4.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/test5.wasm:1","Warn: binary detected: tests/unit/gc/wasm-apps/test6.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/mem_grow_out_of_bounds_01.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/mem_grow_out_of_bounds_02.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/out_of_bounds.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_app_heap_02.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_01.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_02.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_03.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_04.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_05.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_06.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_07.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_08.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_09.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_10.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_11.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_12.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_13.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_14.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_15.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_16.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_17.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_18.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_19.wasm:1","Warn: binary detected: tests/unit/linear-memory-wasm/wasm_files/wasm_mem_page_20.wasm:1","Warn: binary detected: tests/unit/memory64/wasm-apps/8GB_memory.wasm:1","Warn: binary detected: tests/unit/memory64/wasm-apps/atomic_opcodes.wasm:1","Warn: binary detected: tests/unit/memory64/wasm-apps/mem64.wasm:1","Warn: binary detected: tests/unit/memory64/wasm-apps/page_exceed_u32.wasm:1","Warn: binary detected: tests/unit/memory64/wasm-apps/page_exceed_u32_2.wasm:1","Warn: binary detected: tests/unit/memory64/wasm-apps/page_u32_max.wasm:1","Warn: binary detected: tests/unit/runtime-common/wasm-apps/main.wasm:1","Warn: binary detected: tests/unit/shared-heap/wasm-apps/bulk-memory/test_bulk_memory.wasm:1","Warn: binary detected: tests/unit/wasm-vm/wasm-apps/app4/m1.wasm:1","Warn: binary detected: tests/unit/wasm-vm/wasm-apps/app4/m2.wasm:1","Warn: binary detected: tests/unit/wasm-vm/wasm-apps/app4/m3.wasm:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: CppLibFuzzer integration found: tests/fuzz/wasm-mutator-fuzz/aot-compiler/aot_compiler_fuzz.cc:27","Info: CppLibFuzzer integration found: tests/fuzz/wasm-mutator-fuzz/wasm-mutator/wasm_mutator_fuzz.cc:161","Info: CppLibFuzzer integration found: tests/fuzz/wasm-mutator-fuzz/workspace/wasm_mutator_fuzz.cc:26","Info: CppLibFuzzer integration found: tests/fuzz/wasm-mutator-fuzz/aot-compiler/aot_compiler_fuzz.cc:27","Info: CppLibFuzzer integration found: tests/fuzz/wasm-mutator-fuzz/wasm-mutator/wasm_mutator_fuzz.cc:161","Info: CppLibFuzzer integration found: tests/fuzz/wasm-mutator-fuzz/workspace/wasm_mutator_fuzz.cc:26"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact WAMR-2.4.1 not signed: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/235633888","Warn: release artifact WAMR-2.4.0 not signed: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/232097984","Warn: release artifact WAMR-2.3.1 not signed: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/222360864","Warn: release artifact WAMR-2.3.0 not signed: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/218506924","Warn: release artifact WAMR-2.2.0 not signed: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/181147555","Warn: release artifact WAMR-2.4.1 does not have provenance: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/235633888","Warn: release artifact WAMR-2.4.0 does not have provenance: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/232097984","Warn: release artifact WAMR-2.3.1 does not have provenance: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/222360864","Warn: release artifact WAMR-2.3.0 does not have provenance: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/218506924","Warn: release artifact WAMR-2.2.0 does not have provenance: https://api.github.com/repos/bytecodealliance/wasm-micro-runtime/releases/181147555"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_docker_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_docker_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_docker_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_docker_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docker_images.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_docker_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_iwasm_release.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_iwasm_release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_iwasm_release.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_iwasm_release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_iwasm_release.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_iwasm_release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_iwasm_release.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_iwasm_release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_llvm_libraries.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_llvm_libraries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_llvm_libraries.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_llvm_libraries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_llvm_libraries.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_llvm_libraries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_llvm_libraries.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_llvm_libraries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_llvm_libraries.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_llvm_libraries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_lldb.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_lldb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_lldb.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_lldb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wamr_lldb.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_lldb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_lldb.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_lldb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_lldb.yml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_lldb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_sdk.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_sdk.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_vscode_ext.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_vscode_ext.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_vscode_ext.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_vscode_ext.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_vscode_ext.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_vscode_ext.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_vscode_ext.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_vscode_ext.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_wasi_extensions.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_wasi_extensions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamr_wasi_extensions.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamr_wasi_extensions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamrc.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamrc.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamrc.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamrc.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamrc.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamrc.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wamrc.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/build_wamrc.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_version_h.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/check_version_h.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/codeql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coding_guidelines.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/coding_guidelines.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:330: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:334: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:387: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:448: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:505: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:509: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:668: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:671: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:702: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_android_ubuntu.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_android_ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_macos.yml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_nuttx.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_nuttx.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_nuttx.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_nuttx.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_sgx.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_sgx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_sgx.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_sgx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_sgx.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_sgx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_sgx.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_sgx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_sgx.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_sgx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_windows.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_windows.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_windows.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_windows.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compilation_on_zephyr.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_zephyr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/compilation_on_zephyr.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/compilation_on_zephyr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create_tag.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/create_tag.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hadolint_dockerfiles.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/hadolint_dockerfiles.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:390: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:395: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:452: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:629: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_run.yml:658: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/nightly_run.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_process.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/release_process.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_process.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/release_process.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reuse_latest_release_binaries.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/reuse_latest_release_binaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reuse_latest_release_binaries.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/reuse_latest_release_binaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reuse_latest_release_binaries.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/reuse_latest_release_binaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spec_test_on_nuttx.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/spec_test_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spec_test_on_nuttx.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/spec_test_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spec_test_on_nuttx.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/spec_test_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spec_test_on_nuttx.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/spec_test_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spec_test_on_nuttx.yml:332: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/spec_test_on_nuttx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wamr_wasi_extensions.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/wamr_wasi_extensions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wamr_wasi_extensions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/bytecodealliance/wasm-micro-runtime/wamr_wasi_extensions.yml/main?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:7","Warn: containerImage not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.compile:4: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.cpu:4","Warn: containerImage not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.cpu:39: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.nvidia-gpu:4","Warn: containerImage not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.nvidia-gpu:40","Warn: containerImage not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.tpu:4","Warn: containerImage not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.vx-delegate:4","Warn: containerImage not pinned by hash: product-mini/platforms/zephyr/simple/Dockerfile:22: pin your Docker image by updating ghcr.io/zephyrproject-rtos/ci-base:v0.26-branch to ghcr.io/zephyrproject-rtos/ci-base:v0.26-branch@sha256:12f44f069809167ed9d3f1160ca0dbb5a5e9118df37f78092f790b29fb06d962","Warn: containerImage not pinned by hash: test-tools/wamr-ide/WASM-Debug-Server/Docker/Dockerfile:4","Warn: containerImage not pinned by hash: test-tools/wamr-ide/WASM-Debug-Server/Docker/Dockerfile:24: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: test-tools/wamr-ide/WASM-Toolchain/Docker/Dockerfile:5","Warn: containerImage not pinned by hash: test-tools/wamr-ide/WASM-Toolchain/Docker/Dockerfile:51: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: tests/fuzz/wasm-mutator-fuzz/portal/Dockerfile:1","Warn: containerImage not pinned by hash: tests/fuzz/wasm-mutator-fuzz/portal/Dockerfile:16: pin your Docker image by updating nginx:alpine to nginx:alpine@sha256:2459838ed006e699c252db374550c91490068bbf3b35fa8b9d29bfe0e31b8b95","Warn: containerImage not pinned by hash: tests/fuzz/wasm-mutator-fuzz/server/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:38-44","Warn: pipCommand not pinned by hash: .devcontainer/Dockerfile:123-124","Warn: pipCommand not pinned by hash: .devcontainer/Dockerfile:123-124","Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:135","Warn: pipCommand not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.compile:24","Warn: downloadThenRun not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.cpu:21-27","Warn: downloadThenRun not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.nvidia-gpu:21-27","Warn: downloadThenRun not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.tpu:21-27","Warn: downloadThenRun not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.vx-delegate:28-34","Warn: downloadThenRun not pinned by hash: core/iwasm/libraries/wasi-nn/test/Dockerfile.wasi-nn-smoke:57-58","Warn: pipCommand not pinned by hash: product-mini/platforms/zephyr/simple/Dockerfile:43","Warn: pipCommand not pinned by hash: test-tools/wamr-ide/WASM-Toolchain/Docker/Dockerfile:33","Warn: npmCommand not pinned by hash: tests/fuzz/wasm-mutator-fuzz/portal/Dockerfile:12-14","Warn: pipCommand not pinned by hash: tests/fuzz/wasm-mutator-fuzz/server/Dockerfile:16-21","Warn: chocoCommand not pinned by hash: .github/workflows/build_llvm_libraries.yml:125","Warn: npmCommand not pinned by hash: .github/workflows/build_wamr_vscode_ext.yml:36","Warn: npmCommand not pinned by hash: .github/workflows/build_wamr_vscode_ext.yml:42","Warn: npmCommand not pinned by hash: .github/workflows/build_wamr_vscode_ext.yml:44","Warn: chocoCommand not pinned by hash: .github/workflows/compilation_on_windows.yml:178","Warn: pipCommand not pinned by hash: .github/workflows/spec_test_on_nuttx.yml:198","Info:   3 out of 101 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   5 third-party GitHubAction dependencies pinned","Info:   1 out of  17 containerImage dependencies pinned","Info:   0 out of   7 downloadThenRun dependencies pinned","Info:   0 out of   7 pipCommand dependencies pinned","Info:   0 out of   4 npmCommand dependencies pinned","Info:   0 out of   2 chocoCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Info: required approving review count is 2 on branch 'main'","Info: codeowner review is required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-48 / GHSA-fj7x-q9j7-g6q6","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 24 contributing companies or organizations","details":["Info: found contributions from: BansheeMediaPlayer, HawkTracer, Polsl, amazon, amazon(@amzn) gnome foundation(@gnome), amzn, ant group, bytecodealliance, crdsdev, crossplane, crossplane-contrib, espressif, golioth, highflyers, honor device company, iiun, intel, kcp-dev, midokura, netflix, ponylang, siemens ag, university of neuchâtel, xiao mi"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-17T10:41:30.295Z","repository_id":37663997,"created_at":"2025-08-17T10:41:30.295Z","updated_at":"2025-08-17T10:41:30.295Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34862627,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-27T02:00:06.362Z","response_time":126,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aot","assembly-script","embedded","interpreter","iot","jit","pthread","runtime","sgx","wasi-nn","wasi-threads","wasm","wasm-socket","webassembly"],"created_at":"2024-07-31T16:00:30.235Z","updated_at":"2026-06-29T05:01:01.957Z","avatar_url":"https://github.com/bytecodealliance.png","language":"C","funding_links":[],"categories":["C","Language Frameworks","By Industry","Non-Web Embeddings","Libraries","webassembly","Misc","Runtime","Tools","Runtimes \u0026 Platforms"],"sub_categories":["Library OSes and SDKs","Web Development","Languages \u0026 Runtimes","CNCF WASM Working Group","Mesh networks"],"readme":"# WebAssembly Micro Runtime\n\n\n**A [Bytecode Alliance][BA] project**\n\n[BA]: https://bytecodealliance.org/\n\n**[Guide](https://wamr.gitbook.io/)**\u0026emsp;\u0026emsp;**[Website](https://bytecodealliance.github.io/wamr.dev)**\u0026emsp;\u0026emsp;**[Chat](https://bytecodealliance.zulipchat.com/#narrow/stream/290350-wamr)**\n\n[Build WAMR](./doc/build_wamr.md) | [Build AOT Compiler](./wamr-compiler/README.md) | [Embed WAMR](./doc/embed_wamr.md) | [Export Native API](./doc/export_native_api.md) | [Build Wasm Apps](./doc/build_wasm_app.md) | [Samples](./samples/README.md)\n\nWebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime with small footprint, high performance and highly configurable features for applications cross from embedded, IoT, edge to Trusted Execution Environment (TEE), smart contract, cloud native and so on. It includes a few parts as below:\n- [**VMcore**](./core/iwasm/): A set of runtime libraries for loading and running Wasm modules. It supports rich running modes including interpreter, Ahead-of-Time compilation(AoT) and Just-in-Time compilation (JIT). WAMR supports two JIT tiers - Fast JIT, LLVM JIT, and dynamic tier-up from Fast JIT to LLVM JIT.\n- [**iwasm**](./product-mini/): The executable binary built with WAMR VMcore which supports WASI and command line interface.\n- [**wamrc**](./wamr-compiler/): The AOT compiler to compile Wasm file into AOT file\n- Useful components and tools for building real solutions with WAMR vmcore:\n  - [App-framework](https://github.com/bytecodealliance/wamr-app-framework/blob/main/app-framework/README.md): A framework for supporting APIs for the Wasm applications\n  - [App-manager](https://github.com/bytecodealliance/wamr-app-framework/blob/main/app-mgr/README.md): A framework for dynamical loading the Wasm module remotely\n  - [WAMR-IDE](./test-tools/wamr-ide): An experimental VSCode extension for developping WebAssembly applications with C/C++\n\n\n### Key features\n- Full compliant to the W3C Wasm MVP\n- Small runtime binary size (core vmlib on cortex-m4f with tail-call/bulk memory/shared memory support, text size from bloaty)\n  * ~58.9K for fast interpreter\n  * ~56.3K for classic interpreter\n  * ~29.4K for aot runtime\n  * ~21.4K for libc-wasi library\n  * ~3.7K for libc-builtin library\n- Near to native speed by AOT and JIT\n- Self-implemented AOT module loader to enable AOT working on Linux, Windows, MacOS, Android, SGX and MCU systems\n- Choices of Wasm application libc support: the built-in libc subset for the embedded environment or [WASI](https://github.com/WebAssembly/WASI) for the standard libc\n- [The simple C APIs to embed WAMR into host environment](./doc/embed_wamr.md), see [how to integrate WAMR](./doc/embed_wamr.md) and the [API list](./core/iwasm/include/wasm_export.h)\n- [The mechanism to export native APIs to Wasm applications](./doc/export_native_api.md), see [how to register native APIs](./doc/export_native_api.md)\n- [Multiple modules as dependencies](./doc/multi_module.md), ref to [document](./doc/multi_module.md) and [sample](samples/multi-module)\n- [Multi-thread, pthread APIs and thread management](./doc/pthread_library.md), ref to [document](./doc/pthread_library.md) and [sample](samples/multi-thread)\n- [wasi-threads](./doc/pthread_impls.md#wasi-threads-new), ref to [document](./doc/pthread_impls.md#wasi-threads-new) and [sample](samples/wasi-threads)\n- [Linux SGX (Intel Software Guard Extension) support](./doc/linux_sgx.md), ref to [document](./doc/linux_sgx.md)\n- [Source debugging support](./doc/source_debugging.md), ref to [document](./doc/source_debugging.md)\n- [XIP (Execution In Place) support](./doc/xip.md), ref to [document](./doc/xip.md)\n- [Berkeley/Posix Socket support](./doc/socket_api.md), ref to [document](./doc/socket_api.md) and [sample](./samples/socket-api)\n- [Multi-tier JIT](./product-mini#linux) and [Running mode control](https://bytecodealliance.github.io/wamr.dev/blog/introduction-to-wamr-running-modes/)\n- Language bindings: [Go](./language-bindings/go/README.md), [Python](./language-bindings/python/README.md), [Rust](./language-bindings/rust/README.md)\n\n### Wasm post-MVP features\n- [wasm-c-api](https://github.com/WebAssembly/wasm-c-api), ref to [document](doc/wasm_c_api.md) and [sample](samples/wasm-c-api)\n- [128-bit SIMD](https://github.com/WebAssembly/simd), ref to [samples/workload](samples/workload)\n- [Reference Types](https://github.com/WebAssembly/reference-types), ref to [document](doc/ref_types.md) and [sample](samples/ref-types)\n- [Bulk memory operations](https://github.com/WebAssembly/bulk-memory-operations), [Shared memory](https://github.com/WebAssembly/threads/blob/main/proposals/threads/Overview.md#shared-linear-memory), [Memory64](https://github.com/WebAssembly/memory64)\n- [Tail-call](https://github.com/WebAssembly/tail-call), [Garbage Collection](https://github.com/WebAssembly/gc), [Exception Handling](https://github.com/WebAssembly/exception-handling), [Branch Hinting](https://github.com/WebAssembly/branch-hinting)\n- [Extended Constant Expressions](https://github.com/WebAssembly/extended-const)\n\n### Supported architectures and platforms\nThe WAMR VMcore supports the following architectures:\n- X86-64, X86-32\n- ARM, THUMB (ARMV7 Cortex-M7 and Cortex-A15 are tested)\n- AArch64 (Cortex-A57 and Cortex-A53 are tested)\n- RISCV64, RISCV32 (RISC-V LP64 and RISC-V LP64D are tested)\n- XTENSA, MIPS, ARC\n\nThe following platforms are supported, click each link below for how to build iwasm on that platform. Refer to [WAMR porting guide](./doc/port_wamr.md) for how to port WAMR to a new platform.\n- [Linux](./product-mini/README.md#linux),  [Linux SGX (Intel Software Guard Extension)](./doc/linux_sgx.md),  [MacOS](./product-mini/README.md#macos),  [Android](./product-mini/README.md#android), [Windows](./product-mini/README.md#windows), [Windows (MinGW, MSVC)](./product-mini/README.md#mingw)\n- [Zephyr](./product-mini/README.md#zephyr),  [AliOS-Things](./product-mini/README.md#alios-things),  [VxWorks](./product-mini/README.md#vxworks), [NuttX](./product-mini/README.md#nuttx), [RT-Thread](./product-mini/README.md#RT-Thread), [ESP-IDF(FreeRTOS)](./product-mini/README.md#esp-idf)\n\n\n## Getting started\n- [Build VM core](./doc/build_wamr.md) and [Build wamrc AOT compiler](./wamr-compiler/README.md)\n- [Build iwasm (mini product)](./product-mini/README.md): [Linux](./product-mini/README.md#linux), [SGX](./doc/linux_sgx.md), [MacOS](./product-mini/README.md#macos) and [Windows](./product-mini/README.md#windows)\n- [Embed into C/C++](./doc/embed_wamr.md), [Embed into Python](./language-bindings/python), [Embed into Go](./language-bindings/go), [Embed in Rust](./language-bindings/rust)\n- [Register native APIs for Wasm applications](./doc/export_native_api.md)\n- [Build wamrc AOT compiler](./wamr-compiler/README.md)\n- [Build Wasm applications](./doc/build_wasm_app.md)\n- [Port WAMR to a new platform](./doc/port_wamr.md)\n- [VS Code development container](./doc/devcontainer.md)\n- [Samples](./samples) and [Benchmarks](./tests/benchmarks)\n- [End-user APIs documentation](https://bytecodealliance.github.io/wamr.dev/apis/)\n\n\n### Performance and memory\n- [Blog: The WAMR memory model](https://bytecodealliance.github.io/wamr.dev/blog/the-wamr-memory-model/)\n- [Blog: Understand WAMR heaps](https://bytecodealliance.github.io/wamr.dev/blog/understand-the-wamr-heaps/) and [stacks](https://bytecodealliance.github.io/wamr.dev/blog/understand-the-wamr-stacks/)\n- [Blog: Introduction to WAMR running modes](https://bytecodealliance.github.io/wamr.dev/blog/introduction-to-wamr-running-modes/)\n- [Memory usage tuning](./doc/memory_tune.md): the memory model and how to tune the memory usage\n- [Memory usage profiling](./doc/build_wamr.md#enable-memory-profiling-experiment): how to profile the memory usage\n- [Performance tuning](./doc/perf_tune.md): how to tune the performance\n- [Benchmarks](./tests/benchmarks): checkout these links for how to run the benchmarks: [PolyBench](./tests/benchmarks/polybench), [CoreMark](./tests/benchmarks/coremark), [Sightglass](./tests/benchmarks/sightglass), [JetStream2](./tests/benchmarks/jetstream)\n- [Performance and footprint data](https://github.com/bytecodealliance/wasm-micro-runtime/wiki/Performance): the performance and footprint data\n\n\nProject Technical Steering Committee\n====================================\nThe [WAMR PTSC Charter](./TSC_Charter.md) governs the operations of the project TSC.\nThe current TSC members:\n- [dongsheng28849455](https://github.com/dongsheng28849455) - **Dongsheng Yan**, \u003cdongsheng.yan@sony.com\u003e\n- [loganek](https://github.com/loganek) - **Marcin Kolny**, \u003cmkolny@amazon.co.uk\u003e\n- [lum1n0us](https://github.com/lum1n0us) - **Liang He**， \u003cliang.he@intel.com\u003e\n- [no1wudi](https://github.com/no1wudi) **Qi Huang**, \u003chuangqi3@xiaomi.com\u003e\n- [qinxk-inter](https://github.com/qinxk-inter) - **Xiaokang Qin**， \u003cxiaokang.qxk@antgroup.com\u003e\n- [ttrenner ](https://github.com/ttrenner) - **Trenner, Thomas**， \u003ctrenner.thomas@siemens.com\u003e\n- [wei-tang](https://github.com/wei-tang) - **Wei Tang**， \u003ctangwei.tang@antgroup.com\u003e\n- [wenyongh](https://github.com/wenyongh) - **Wenyong Huang**， \u003cwenyong.huang@intel.com\u003e\n- [woodsmc](https://github.com/woodsmc) - **Woods, Chris**， \u003cchris.woods@siemens.com\u003e\n- [xujuntwt95329](https://github.com/xujuntwt95329) - **Jun Xu**， \u003cJun1.Xu@intel.com\u003e\n- [xwang98](https://github.com/xwang98) - **Xin Wang**， \u003cxin.wang@intel.com\u003e (chair)\n- [yamt](https://github.com/yamt) - **Takashi Yamamoto**, \u003cyamamoto@midokura.com\u003e\n\n\nLicense\n=======\nWAMR uses the same license as LLVM: the `Apache 2.0 license` with the LLVM\nexception. See the LICENSE file for details. This license allows you to freely\nuse, modify, distribute and sell your own products based on WAMR.\nAny contributions you make will be under the same license.\n\n# More resources\n- [Who use WAMR?](https://github.com/bytecodealliance/wasm-micro-runtime/wiki)\n- [WAMR Blogs](https://bytecodealliance.github.io/wamr.dev/blog/)\n- [Community news and events](https://bytecodealliance.github.io/wamr.dev/events/)\n- [WAMR TSC meetings](https://github.com/bytecodealliance/wasm-micro-runtime/wiki/TSC-meeting-notes)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbytecodealliance%2Fwasm-micro-runtime","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbytecodealliance%2Fwasm-micro-runtime","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbytecodealliance%2Fwasm-micro-runtime/lists"}