{"id":13537278,"url":"https://github.com/chipsec/chipsec","last_synced_at":"2026-07-01T00:00:57.139Z","repository":{"id":14772493,"uuid":"17494082","full_name":"chipsec/chipsec","owner":"chipsec","description":"Platform Security Assessment Framework","archived":false,"fork":false,"pushed_at":"2026-06-26T01:06:35.000Z","size":129183,"stargazers_count":3268,"open_issues_count":55,"forks_count":613,"subscribers_count":183,"default_branch":"chipsec2","last_synced_at":"2026-06-30T08:26:19.153Z","etag":null,"topics":["firmware","firmware-security","firmware-tools","security","security-tools"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chipsec.png","metadata":{"files":{"readme":"README","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-03-06T21:57:10.000Z","updated_at":"2026-06-30T02:47:01.000Z","dependencies_parsed_at":"2024-01-09T02:42:24.745Z","dependency_job_id":"17534820-2274-4021-a675-ee3923407408","html_url":"https://github.com/chipsec/chipsec","commit_stats":{"total_commits":1928,"total_committers":102,"mean_commits":"18.901960784313726","dds":0.7971991701244814,"last_synced_commit":"a7df79427205e2e3601de3874df96e2bbff8f035"},"previous_names":[],"tags_count":107,"template":false,"template_full_name":null,"purl":"pkg:github/chipsec/chipsec","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chipsec%2Fchipsec","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chipsec%2Fchipsec/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chipsec%2Fchipsec/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chipsec%2Fchipsec/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chipsec","download_url":"https://codeload.github.com/chipsec/chipsec/tar.gz/refs/heads/chipsec2","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chipsec%2Fchipsec/sbom","scorecard":{"id":278093,"data":{"date":"2025-08-12T07:29:10Z","repo":{"name":"github.com/chipsec/chipsec","commit":"0952484848343ce9d42b62853bc46649353bd04e"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:20","Info: jobLevel 'actions' permission set to 'read': .github/workflows/scorecards.yml:30","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecards.yml:29","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:13","Info: topLevel permissions set to 'read-all': .github/workflows/scorecards.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/tests.yml:6","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU General Public License v2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:262","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:263","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:264","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:266","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:187","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:188","Info:  16 out of  16 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":0,"reason":"10 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2022-230 / GHSA-wrxv-2j5q-m38w","Warn: Project is vulnerable to: GHSA-2g68-c3qc-8985","Warn: Project is vulnerable to: GHSA-f9vj-2wh5-fj8j","Warn: Project is vulnerable to: GHSA-q34m-jh98-gwm2","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5","Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579","Warn: Project is vulnerable to: PYSEC-2018-21 / GHSA-hgg3-g7gr-66r7","Warn: Project is vulnerable to: GHSA-j225-cvw7-qrx7","Warn: Project is vulnerable to: PYSEC-2021-112 / GHSA-hwfp-hg2m-9vr2"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 1.13.15 not signed: https://api.github.com/repos/chipsec/chipsec/releases/236879571","Warn: release artifact 1.13.14 not signed: https://api.github.com/repos/chipsec/chipsec/releases/228081163","Warn: release artifact 1.13.13 not signed: https://api.github.com/repos/chipsec/chipsec/releases/221699170","Warn: release artifact 1.13.12 not signed: https://api.github.com/repos/chipsec/chipsec/releases/216001877","Warn: release artifact 1.13.11 not signed: https://api.github.com/repos/chipsec/chipsec/releases/208530391","Warn: release artifact 1.13.15 does not have provenance: https://api.github.com/repos/chipsec/chipsec/releases/236879571","Warn: release artifact 1.13.14 does not have provenance: https://api.github.com/repos/chipsec/chipsec/releases/228081163","Warn: release artifact 1.13.13 does not have provenance: https://api.github.com/repos/chipsec/chipsec/releases/221699170","Warn: release artifact 1.13.12 does not have provenance: https://api.github.com/repos/chipsec/chipsec/releases/216001877","Warn: release artifact 1.13.11 does not have provenance: https://api.github.com/repos/chipsec/chipsec/releases/208530391"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":4,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"13 out of 13 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 15 contributing companies or organizations","details":["Info: found contributions from: BinetReseau, Polytechnique-org, SELinuxProject, USBGuard, anssi-fr, archlinuxhardened, chipsec, dell technologies, google, hardenedlinux, intel, siemens ag, solar-wine, web3infra-foundation, x-forwarded-for"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-17T15:01:39.375Z","repository_id":14772493,"created_at":"2025-08-17T15:01:39.375Z","updated_at":"2025-08-17T15:01:39.375Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34987610,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-30T02:00:05.919Z","response_time":92,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["firmware","firmware-security","firmware-tools","security","security-tools"],"created_at":"2024-08-01T09:00:57.193Z","updated_at":"2026-07-01T00:00:57.109Z","avatar_url":"https://github.com/chipsec.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"9eee96404f868f372a6cbc6769ccb7f8\"\u003e\u003c/a\u003e新添加的","Python","Tools","Tools :hammer:","***BIOS UEFI***","Tools to check security hardening","Uncategorized","Testing Tools","Hardware Security","Hardware Tools"],"sub_categories":["\u003ca id=\"31185b925d5152c7469b963809ceb22d\"\u003e\u003c/a\u003e新添加的","Open Source","***Tools***","Hardware - CPU - BIOS - UEFI","Uncategorized","Misc Tools","Chip-Off and Memory Forensics"],"readme":"CHIPSEC: Platform Security Assessment Framework\r\n===============================================\r\n\r\nCHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware (BIOS/UEFI), and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities. It can be run on Windows, Linux, and UEFI shell. Instructions for installing and using CHIPSEC can be found in the [manual](chipsec-manual.pdf).\r\n\r\nNOTE: This software is for security testing purposes. Use at your own risk. Read WARNING.txt before using.\r\n\r\nFirst version of CHIPSEC was released in March 2014:\r\nAnnouncement at CanSecWest 2014: http://www.c7zero.info/stuff/Platform%20Firmware%20Security%20Assessment%20wCHIPSEC-csw14-final.pdf\r\n\r\nRecent presentation on how to use CHIPSEC to find vulnerabilities in firmware, hypervisors and hardware configuration, explore low level system assets and even detect firmware implants:\r\nExploring Your System Deeper: https://www.slideshare.net/CanSecWest/csw2017-bazhaniuk-exploringyoursystemdeeperupdated\r\n\r\nProjects That Include CHIPSEC\r\n-----------------------------\r\n\r\n * Linux UEFI Validation (LUV): https://01.org/linux-uefi-validation\r\n * BlackArch Linux: https://www.blackarch.org/index.html\r\n\r\nContact Us\r\n----------\r\n\r\nFor any questions or suggestions please contact us at: chipsec@intel.com\r\n\r\nMailing lists:\r\n\r\n * CHIPSEC users: https://groups.google.com/forum/#!forum/chipsec-users\r\n * CHIPSEC discussion list on 01.org: https://lists.01.org/mailman/listinfo/chipsec\r\n\r\nTwitter:\r\n\r\n * For CHIPSEC release alerts: Follow CHIPSEC Release at https://twitter.com/ChipsecR\r\n * For general CHIPSEC info: Follow CHIPSEC at https://twitter.com/Chipsec\r\n\r\nFor AMD related questions or suggestions please contact Gabriel Kerneis at: Gabriel.Kerneis@ssi.gouv.fr","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fchipsec%2Fchipsec","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fchipsec%2Fchipsec","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fchipsec%2Fchipsec/lists"}