{"id":13562744,"url":"https://github.com/cheqd/cheqd-node","last_synced_at":"2026-01-17T12:49:08.388Z","repository":{"id":37076011,"uuid":"352898787","full_name":"cheqd/cheqd-node","owner":"cheqd","description":"Ledger/node software for cheqd's decentralised identity network. Built using the Cosmos SDK blockchain framework.","archived":false,"fork":false,"pushed_at":"2026-01-13T10:17:13.000Z","size":67619,"stargazers_count":68,"open_issues_count":21,"forks_count":51,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-01-13T11:41:51.527Z","etag":null,"topics":["blockchain","cosmos","cosmos-sdk","decentralized","decentralized-identifiers","decentralized-identity","hacktoberfest","p2p","self-sovereign-identity"],"latest_commit_sha":null,"homepage":"https://docs.cheqd.io/node","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cheqd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE.md","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-03-30T06:48:02.000Z","updated_at":"2026-01-13T10:17:18.000Z","dependencies_parsed_at":"2023-02-19T18:01:07.869Z","dependency_job_id":"9ed6211f-c976-4320-9a79-537dd4aec9df","html_url":"https://github.com/cheqd/cheqd-node","commit_stats":{"total_commits":1674,"total_committers":42,"mean_commits":"39.857142857142854","dds":0.8130227001194743,"last_synced_commit":"513dac8228532c2814536e9f925e76b5759b1e13"},"previous_names":["verim-id/verim-node"],"tags_count":322,"template":false,"template_full_name":null,"purl":"pkg:github/cheqd/cheqd-node","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cheqd%2Fcheqd-node","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cheqd%2Fcheqd-node/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cheqd%2Fcheqd-node/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cheqd%2Fcheqd-node/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cheqd","download_url":"https://codeload.github.com/cheqd/cheqd-node/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cheqd%2Fcheqd-node/sbom","scorecard":{"id":271613,"data":{"date":"2025-08-11","repo":{"name":"github.com/cheqd/cheqd-node","commit":"c6698c8e7b51cbf32617b3fe41968075dce7fa5d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.8,"checks":[{"name":"Maintained","score":10,"reason":"25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":3,"reason":"Found 11/30 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:22","Warn: topLevel 'contents' permission set to 'write': .github/workflows/build.yml:8","Info: topLevel 'packages' permission set to 'read': .github/workflows/build.yml:9","Warn: topLevel 'checks' permission set to 'write': .github/workflows/build.yml:10","Warn: no topLevel permission defined: .github/workflows/cleanup-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/cleanup-cache.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Warn: no topLevel permission defined: .github/workflows/dispatch.yml:1","Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Warn: no topLevel permission defined: .github/workflows/pull-request.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/test.yml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/test.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/test.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: tests/fee-abs/osmosis/bytecode/crosschain_registry.wasm:1","Warn: binary detected: tests/fee-abs/osmosis/bytecode/crosschain_swaps.wasm:1","Warn: binary detected: tests/fee-abs/osmosis/bytecode/swaprouter.wasm:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v4.1.2 not signed: https://api.github.com/repos/cheqd/cheqd-node/releases/238602452","Warn: release artifact v4.1.1-develop.2 not signed: https://api.github.com/repos/cheqd/cheqd-node/releases/238574860","Warn: release artifact v4.1.1 not signed: https://api.github.com/repos/cheqd/cheqd-node/releases/232496832","Warn: release artifact v4.1.1-develop.1 not signed: https://api.github.com/repos/cheqd/cheqd-node/releases/231070335","Warn: release artifact v4.1.0 not signed: https://api.github.com/repos/cheqd/cheqd-node/releases/228069586","Warn: release artifact v4.1.2 does not have provenance: https://api.github.com/repos/cheqd/cheqd-node/releases/238602452","Warn: release artifact v4.1.1-develop.2 does not have provenance: https://api.github.com/repos/cheqd/cheqd-node/releases/238574860","Warn: release artifact v4.1.1 does not have provenance: https://api.github.com/repos/cheqd/cheqd-node/releases/232496832","Warn: release artifact v4.1.1-develop.1 does not have provenance: https://api.github.com/repos/cheqd/cheqd-node/releases/231070335","Warn: release artifact v4.1.0 does not have provenance: https://api.github.com/repos/cheqd/cheqd-node/releases/228069586"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup-actions.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/cleanup-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup-cache.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/cleanup-cache.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/pull-request.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull-request.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:324: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:329: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:334: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:344: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:353: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/cheqd/cheqd-node/test.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:5","Warn: containerImage not pinned by hash: docker/Dockerfile:24","Warn: goCommand not pinned by hash: scripts/protoc-pulsar-gen.sh:7","Warn: goCommand not pinned by hash: scripts/protoc-pulsar-gen.sh:8","Warn: goCommand not pinned by hash: scripts/protoc-pulsar-gen.sh:9","Warn: goCommand not pinned by hash: scripts/protoc-swagger-gen.sh:62","Warn: goCommand not pinned by hash: scripts/protoc-swagger-gen.sh:68","Warn: goCommand not pinned by hash: .github/workflows/test.yml:95","Warn: goCommand not pinned by hash: .github/workflows/test.yml:155","Warn: goCommand not pinned by hash: .github/workflows/test.yml:213","Info:   0 out of  52 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  27 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned","Info:   2 out of  10 goCommand dependencies pinned","Info:   1 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 16 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":4,"reason":"6 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2024-3259 / GHSA-p7mv-53f2-4cwj","Warn: Project is vulnerable to: GO-2025-3442 / GHSA-22qq-3xwm-r5x4","Warn: Project is vulnerable to: GO-2025-3443 / GHSA-r3r4-g7hq-pq4f","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T13:32:49.823Z","repository_id":37076011,"created_at":"2025-08-17T13:32:49.823Z","updated_at":"2025-08-17T13:32:49.823Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28508609,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-17T11:50:55.898Z","status":"ssl_error","status_checked_at":"2026-01-17T11:50:55.569Z","response_time":85,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blockchain","cosmos","cosmos-sdk","decentralized","decentralized-identifiers","decentralized-identity","hacktoberfest","p2p","self-sovereign-identity"],"created_at":"2024-08-01T13:01:11.852Z","updated_at":"2026-01-17T12:49:08.350Z","avatar_url":"https://github.com/cheqd.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"# cheqd-node: Ledger code cheqd network\n\n[![GitHub release (latest by date)](https://img.shields.io/github/v/release/cheqd/cheqd-node?color=green\u0026label=stable%20release\u0026style=flat-square)](https://github.com/cheqd/cheqd-node/releases/latest) ![GitHub Release Date](https://img.shields.io/github/release-date/cheqd/cheqd-node?color=green\u0026style=flat-square) [![GitHub license](https://img.shields.io/github/license/cheqd/cheqd-node?color=blue\u0026style=flat-square)](https://github.com/cheqd/cheqd-node/blob/main/LICENSE)\n\n[![GitHub release (latest by date including pre-releases)](https://img.shields.io/github/v/release/cheqd/cheqd-node?include_prereleases\u0026label=dev%20release\u0026style=flat-square)](https://github.com/cheqd/cheqd-node/releases/) ![GitHub commits since latest release (by date)](https://img.shields.io/github/commits-since/cheqd/cheqd-node/latest?style=flat-square) [![GitHub contributors](https://img.shields.io/github/contributors/cheqd/cheqd-node?label=contributors%20%E2%9D%A4%EF%B8%8F\u0026style=flat-square)](https://github.com/cheqd/cheqd-node/graphs/contributors)\n\n[![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/cheqd/cheqd-node/dispatch.yml?label=workflows\u0026style=flat-square)](https://github.com/cheqd/cheqd-node/actions/workflows/dispatch.yml) [![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/cheqd/cheqd-node/codeql.yml?label=CodeQL\u0026style=flat-square)](https://github.com/cheqd/cheqd-node/actions/workflows/codeql.yml) ![GitHub go.mod Go version](https://img.shields.io/github/go-mod/go-version/cheqd/cheqd-node?style=flat-square) ![GitHub repo size](https://img.shields.io/github/repo-size/cheqd/cheqd-node?style=flat-square)\n\n## ℹ️ Overview\n\n[**cheqd**](https://www.cheqd.io) is a public self-sovereign identity (SSI) network for building secure 🔐 and private 🤫 self-sovereign identity systems on [Cosmos](https://cosmos.network) 💫. Our core vision is to add viable commercial models to decentralised digital 🆔\n\n`cheqd-node` is the ledger/node component of the cheqd network tech stack, built using [Cosmos SDK](https://github.com/cosmos/cosmos-sdk) and [CometBFT](https://cometbft.com/).\n\n## ▶️ Quick start for joining cheqd networks\n\nJoin our [**Discord server**](http://cheqd.link/discord-github) for help, questions, and support if you are looking to join our [mainnet](https://explorer.cheqd.io) or [testnet](https://testnet-explorer.cheqd.io).\n\nEither the cheqd team, or one of your fellow node operators will be happy to offer some guidance.\n\n### ✅ Mainnet\n\nGetting started as a node operator on the cheqd network [mainnet](https://explorer.cheqd.io) is as simple as...\n\n1. Install [the latest stable release](https://github.com/cheqd/cheqd-node/releases/latest) of `cheqd-node` software (currently `v3.x.x`) on a hosting platform of your choice by [following the setup guide](https://docs.cheqd.io/node/getting-started/setup-and-configure).\n2. Once you have acquired CHEQ tokens, [promote your node to a validator](https://docs.cheqd.io/node/validator-guides/validator-guide)\n\nIf successfully configured, your node would become the latest validator on the cheqd mainnet. Welcome to the new digital ID revolution!\n\n### 🚧 Testnet\n\nOur [testnet](https://testnet-explorer.cheqd.io) is the easiest place for developers and node operators to get started if you're not *quite* ready yet to dive into building apps on our mainnet. To get started...\n\n1. Install [the latest stable release](https://github.com/cheqd/cheqd-node/releases/latest) of `cheqd-node` software (currently `v3.x.x`) on a hosting platform of your choice by [following the setup guide](https://docs.cheqd.io/node/getting-started/setup-and-configure).\n2. Acquire testnet CHEQ tokens through [our testnet faucet](https://testnet-faucet.cheqd.io).\n3. Once you have acquired CHEQ tokens, [promote your node to a validator](https://docs.cheqd.io/node/validator-guides/validator-guide)\n\n## 🧑‍💻 Using cheqd\n\nOnce installed, `cheqd-node` can be controlled using the [cheqd Cosmos CLI guide](https://docs.cheqd.io/node/getting-started/cheqd-cli).\n\n### 📌 Currently supported functionality\n\n* Basic token functionality for holding and transferring tokens to other accounts on the same network\n* Creating, managing, and configuring accounts and keys on a cheqd node\n* Staking and participating in public-permissionless governance\n* Governance framework for public-permissionless self-sovereign identity networks\n* Creating [`did:cheqd` method DIDs](https://docs.cheqd.io/identity/architecture/adr-list/adr-001-cheqd-did-method), DID Documents (\"DIDDocs\")\n* Querying DIDs/DIDDocs using our [Universal Resolver driver](https://docs.cheqd.io/identity/advanced/did-resolver)\n* Creating and managing Verifiable Credentials anchored to DIDs on cheqd mainnet\n* Creating [on-ledger DID-Linked \"resources\" (e.g., schemas, visual representations of credentials, etc)](https://docs.cheqd.io/identity/guides/did-linked-resources) that can be used in DIDDocs and Verifiable Credentials. This is used to support [AnonCreds on cheqd](https://docs.cheqd.io/identity/guides/anoncreds)\n* Custom [pricing for DID and Resources](https://cheqd.io/developers/) with burn to manage inflation.\n* EIP-1559 style feemarkets pricing for dynamic fees.\n\n## 🛠 Developing \u0026 contributing to cheqd\n\n`cheqd-node` is written in Go and built using Cosmos SDK. The [Cosmos SDK Developer Guide](https://docs.cosmos.network/main) explains a lot of the [basic concepts](https://docs.cosmos.network/main/basics/app-anatomy) of how the cheqd network functions.\n\nIf you want to build a node from source or contribute to the code, please read our guide to [building and testing](https://docs.cheqd.io/node/developing-on-cheqd/build-and-networks).\n\n### Creating a local network\n\nIf you are building from source, or otherwise interested in running a local network, we have [instructions on how to set up a new network](https://docs.cheqd.io/node/developing-on-cheqd/build-and-networks) for development purposes.\n\n## 🐞 Bug reports \u0026 🤔 feature requests\n\nIf you notice anything not behaving how you expected, or would like to make a suggestion / request for a new feature, please create a [**new issue**](https://github.com/cheqd/cheqd-node/issues/new/choose) and let us know.\n\n## 💬 Community\n\nOur [**Discord server**](http://cheqd.link/discord-github) is our primary chat channel for the open-source community, software developers, and node operators.\n\nPlease reach out to us there for discussions, help, and feedback on the project.\n\n## 🙋 Find us elsewhere\n\n[![Telegram](https://img.shields.io/badge/Telegram-2CA5E0?style=for-the-badge\u0026logo=telegram\u0026logoColor=white)](https://t.me/cheqd) [![Discord](https://img.shields.io/badge/Discord-7289DA?style=for-the-badge\u0026logo=discord\u0026logoColor=white)](http://cheqd.link/discord-github) [![Twitter](https://img.shields.io/badge/Twitter-1DA1F2?style=for-the-badge\u0026logo=twitter\u0026logoColor=white)](https://twitter.com/intent/follow?screen_name=cheqd_io) [![LinkedIn](https://img.shields.io/badge/LinkedIn-0077B5?style=for-the-badge\u0026logo=linkedin\u0026logoColor=white)](http://cheqd.link/linkedin) [![Medium](https://img.shields.io/badge/Medium-12100E?style=for-the-badge\u0026logo=medium\u0026logoColor=white)](https://blog.cheqd.io) [![YouTube](https://img.shields.io/badge/YouTube-FF0000?style=for-the-badge\u0026logo=youtube\u0026logoColor=white)](https://www.youtube.com/channel/UCBUGvvH6t3BAYo5u41hJPzw/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcheqd%2Fcheqd-node","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcheqd%2Fcheqd-node","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcheqd%2Fcheqd-node/lists"}