{"id":13409122,"url":"https://github.com/cosmos/cosmos-sdk","last_synced_at":"2026-08-27T20:29:27.004Z","repository":{"id":37398430,"uuid":"51193526","full_name":"cosmos/cosmos-sdk","owner":"cosmos","description":"Framework for building performant, customizable blockchains with native interoperability","archived":false,"fork":false,"pushed_at":"2026-08-24T16:15:38.000Z","size":374111,"stargazers_count":7049,"open_issues_count":234,"forks_count":4220,"subscribers_count":242,"default_branch":"main","last_synced_at":"2026-08-25T12:54:09.475Z","etag":null,"topics":["blockchain","cometbft","cosmos-sdk","cryptocurrency","go","golang","tendermint"],"latest_commit_sha":null,"homepage":"https://cosmos.network/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cosmos.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-02-06T07:15:53.000Z","updated_at":"2026-08-24T12:24:10.000Z","dependencies_parsed_at":"2026-08-08T06:35:27.070Z","dependency_job_id":null,"html_url":"https://github.com/cosmos/cosmos-sdk","commit_stats":{"total_commits":11785,"total_committers":649,"mean_commits":18.15870570107858,"dds":0.9234620280016971,"last_synced_commit":"4fea3fba73abafc80d4f5b840b04f787d1138a3c"},"previous_names":["tendermint/cosmos-sdk","tendermint/blackstar"],"tags_count":746,"template":false,"template_full_name":null,"purl":"pkg:github/cosmos/cosmos-sdk","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cosmos%2Fcosmos-sdk","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cosmos%2Fcosmos-sdk/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cosmos%2Fcosmos-sdk/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cosmos%2Fcosmos-sdk/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cosmos","download_url":"https://codeload.github.com/cosmos/cosmos-sdk/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cosmos%2Fcosmos-sdk/sbom","scorecard":{"id":305640,"data":{"date":"2025-08-11","repo":{"name":"github.com/cosmos/cosmos-sdk","commit":"1f64afaca077b6899dde13d3556bbb326f133d17"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":9,"reason":"Found 26/27 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/lint-pr.yml:16","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/lint-pr.yml:17","Info: found token with 'none' permissions: .github/workflows/md-link-checker.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pr_labeler.yml:11","Info: jobLevel 'contents' permission set to 'read': .github/workflows/proto-docker.yml:31","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/proto-docker.yml:32","Info: found token with 'none' permissions: .github/workflows/sims-047.yml:30","Info: found token with 'none' permissions: .github/workflows/sims-047.yml:105","Info: found token with 'none' permissions: .github/workflows/sims-050.yml:106","Info: found token with 'none' permissions: .github/workflows/sims-050.yml:31","Info: found token with 'none' permissions: .github/workflows/sims-053.yml:106","Info: found token with 'none' permissions: .github/workflows/sims-053.yml:31","Info: found token with 'none' permissions: .github/workflows/sims-nightly.yml:49","Info: jobLevel 'contents' permission set to 'read': .github/workflows/sims.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/build-docs.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/build.yml:10","Warn: no topLevel permission defined: .github/workflows/clean-action-artifacts.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/consensuswarn.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/dependabot-update-all.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependencies-review.yml:7","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker.yml:23","Warn: topLevel 'packages' permission set to 'write': .github/workflows/docker.yml:24","Warn: no topLevel permission defined: .github/workflows/gosec.yml:1","Warn: no topLevel permission defined: .github/workflows/issue_labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/issues.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/lint-pr.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/lint.yml:10","Warn: no topLevel permission defined: .github/workflows/md-link-checker.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-go-mod-tidy-mocks.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/pr_labeler.yml:6","Warn: no topLevel permission defined: .github/workflows/proto-docker.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/proto.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-confix.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-cosmovisor.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-simd.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:11","Warn: no topLevel permission defined: .github/workflows/sims-047.yml:1","Warn: no topLevel permission defined: .github/workflows/sims-050.yml:1","Warn: no topLevel permission defined: .github/workflows/sims-053.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/sims-nightly.yml:11","Warn: no topLevel permission defined: .github/workflows/sims.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/systemtests.yml:12","Warn: topLevel 'contents' permission set to 'write': .github/workflows/test.yml:10"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: GoBuiltInFuzzer integration found: client/fuzz_test.go:55","Info: GoBuiltInFuzzer integration found: math/legacy_dec_fuzz_test.go:10","Info: GoBuiltInFuzzer integration found: math/legacy_dec_fuzz_test.go:28","Info: GoBuiltInFuzzer integration found: math/legacy_dec_fuzz_test.go:59","Info: GoBuiltInFuzzer integration found: simapp/sim_test.go:285","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/crypto_hd_deriveprivatekeyforpath_test.go:18","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/crypto_hd_newparamsfrompath_test.go:11","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/crypto_types_compactbitarray_marshalunmarshal_test.go:11","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/tendermint_amino_decodetime_test.go:12","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/types_dec_setstring_test.go:12","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/types_parsecoin_test.go:11","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/types_parsedeccoin_test.go:11","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/types_parsetimebytes_test.go:13","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/types_verifyaddressformat_test.go:11","Info: GoBuiltInFuzzer integration found: tests/fuzz/tests/unknownproto_test.go:12","Info: GoBuiltInFuzzer integration found: types/bech32/bech32_test.go:27","Info: GoBuiltInFuzzer integration found: types/fuzz_test.go:9","Info: GoBuiltInFuzzer integration found: types/query/fuzz_test.go:23","Info: GoBuiltInFuzzer integration found: x/tx/decode/fuzz_test.go:76","Info: GoBuiltInFuzzer integration found: x/tx/decode/fuzz_test.go:91","Info: GoBuiltInFuzzer integration found: x/tx/signing/aminojson/fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: x/tx/signing/textual/fuzz_test.go:21","Info: GoBuiltInFuzzer integration found: x/tx/signing/textual/fuzz_test.go:43","Info: GoBuiltInFuzzer integration found: x/tx/signing/textual/fuzz_test.go:62","Info: GoBuiltInFuzzer integration found: x/tx/signing/textual/fuzz_test.go:111","Info: GoBuiltInFuzzer integration found: x/tx/signing/textual/fuzz_test.go:162","Info: GoBuiltInFuzzer integration found: x/tx/signing/textual/fuzz_test.go:224"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release-cosmovisor.yml:11"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/dependabot-update-all.yml:40","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-docs.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/build-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-docs.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/build-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/changelog-reminder.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/changelog-reminder.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/changelog-reminder.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/changelog-reminder.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/clean-action-artifacts.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/clean-action-artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/consensuswarn.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/consensuswarn.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/consensuswarn.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/consensuswarn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependabot-update-all.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/dependabot-update-all.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependabot-update-all.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/dependabot-update-all.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-update-all.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/dependabot-update-all.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependencies-review.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/dependencies-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependencies-review.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/dependencies-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependencies-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/dependencies-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/docker.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gosec.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/gosec.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gosec.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/gosec.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gosec.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/gosec.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue_labeler.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/issue_labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issues.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/issues.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-pr.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/lint-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-pr.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/lint-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-pr.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/lint-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/md-link-checker.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/md-link-checker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/md-link-checker.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/md-link-checker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/md-link-checker.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/md-link-checker.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-go-mod-tidy-mocks.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/pr-go-mod-tidy-mocks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-go-mod-tidy-mocks.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/pr-go-mod-tidy-mocks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-go-mod-tidy-mocks.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/pr-go-mod-tidy-mocks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-go-mod-tidy-mocks.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/pr-go-mod-tidy-mocks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_labeler.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/pr_labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/proto-docker.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto-docker.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto-docker.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto-docker.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto-docker.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto-docker.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto-docker.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto-docker.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/proto.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/proto.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/proto.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-confix.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-confix.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-confix.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-confix.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-confix.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-confix.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-cosmovisor.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-cosmovisor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-cosmovisor.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-cosmovisor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-cosmovisor.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-cosmovisor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-simd.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-simd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-simd.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-simd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-simd.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release-simd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-047.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims-047.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-047.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-050.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims-050.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-050.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims-053.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-053.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-053.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-nightly.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sims-nightly.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-nightly.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims-nightly.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sims.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/sims.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systemtests.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/systemtests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systemtests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/systemtests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/systemtests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/systemtests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systemtests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/systemtests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systemtests.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/systemtests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systemtests.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/systemtests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systemtests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/systemtests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:340: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:507: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:508: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:514: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:316: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:317: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:323: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:454: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:455: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:461: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:361: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:408: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:414: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:430: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:431: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:437: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:484: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:485: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:491: update your workflow using https://app.stepsecurity.io/secureworkflow/cosmos/cosmos-sdk/test.yml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:15","Warn: containerImage not pinned by hash: Dockerfile:43: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: contrib/devtools/Dockerfile:5","Warn: containerImage not pinned by hash: contrib/devtools/Dockerfile:6: pin your Docker image by updating golang:1.24-alpine to golang:1.24-alpine@sha256:c8c5f95d64aa79b6547f3b626eb84b16a7ce18a139e3e9ca19a8c078b85ba80d","Warn: containerImage not pinned by hash: contrib/images/simd-dlv/Dockerfile:1","Warn: containerImage not pinned by hash: contrib/images/simd-dlv/Dockerfile:23","Warn: containerImage not pinned by hash: contrib/images/simd-env/Dockerfile:1","Warn: containerImage not pinned by hash: contrib/images/simd-env/Dockerfile:23","Warn: npmCommand not pinned by hash: contrib/devtools/Dockerfile:17","Warn: goCommand not pinned by hash: contrib/devtools/Dockerfile:28-32","Warn: goCommand not pinned by hash: contrib/devtools/Dockerfile:28-32","Warn: goCommand not pinned by hash: contrib/images/simd-dlv/Dockerfile:4","Warn: npmCommand not pinned by hash: docs/build-all.sh:24","Warn: npmCommand not pinned by hash: .github/workflows/build-docs.yml:37","Info:   1 out of 151 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  55 third-party GitHubAction dependencies pinned","Info:   0 out of   8 containerImage dependencies pinned","Info:   2 out of   5 npmCommand dependencies pinned","Info:   4 out of   7 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 17 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":4,"reason":"6 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-1821","Warn: Project is vulnerable to: GO-2023-1881","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T21:57:39.250Z","repository_id":37398430,"created_at":"2025-08-17T21:57:39.250Z","updated_at":"2025-08-17T21:57:39.250Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36902581,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-25T02:00:06.831Z","response_time":104,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blockchain","cometbft","cosmos-sdk","cryptocurrency","go","golang","tendermint"],"created_at":"2024-07-30T20:00:58.143Z","updated_at":"2026-08-27T20:29:26.997Z","avatar_url":"https://github.com/cosmos.png","language":"Go","funding_links":[],"categories":["Popular","Uncategorized","Go","区块链","Blockchain","Repositories","区块链核心库","武器库","🤔 — Why should you be interested in the Cosmos Hub","Cryptocurrencies"],"sub_categories":["Contents","后端"],"readme":"\u003cdiv align=\"left\"\u003e\n  \u003ch1\u003e Cosmos SDK \u003c/h1\u003e\n\u003c/div\u003e\n\n![banner](docs/static/img/banner.svg)\n\n\u003cdiv align=\"center\"\u003e\n  \u003ca href=\"https://github.com/cosmos/cosmos-sdk/blob/main/LICENSE\"\u003e\n    \u003cimg alt=\"License: Apache-2.0\" src=\"https://img.shields.io/github/license/cosmos/cosmos-sdk.svg\" /\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://pkg.go.dev/github.com/cosmos/cosmos-sdk\"\u003e\n    \u003cimg src=\"https://pkg.go.dev/badge/github.com/cosmos/cosmos-sdk.svg\" alt=\"Go Reference\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://goreportcard.com/report/github.com/cosmos/cosmos-sdk\"\u003e\n    \u003cimg alt=\"Go report card\" src=\"https://goreportcard.com/badge/github.com/cosmos/cosmos-sdk\" /\u003e\n  \u003c/a\u003e\n\u003c/div\u003e\n\u003cdiv align=\"center\"\u003e\n  \u003ca href=\"https://discord.com/invite/interchain\"\u003e\n    \u003cimg alt=\"Discord\" src=\"https://img.shields.io/discord/669268347736686612.svg\" /\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://sourcegraph.com/github.com/cosmos/cosmos-sdk?badge\"\u003e\n    \u003cimg alt=\"Imported by\" src=\"https://sourcegraph.com/github.com/cosmos/cosmos-sdk/-/badge.svg\" /\u003e\n  \u003c/a\u003e\n\u003c/div\u003e\n\nThe Cosmos SDK is a modular, open-source blockchain SDK for building secure, high-performance Layer 1 chains with full customizability used by 200+ chains in production. Developers can use the Cosmos SDK to easily and quickly spin up custom blockchains that can natively interoperate.\n\nThe Cosmos SDK is tailored for building secure, sovereign application-specific blockchains. Developers building with the Cosmos SDK can use predefined modules that cover standard blockchain functionality or create custom modules for their specific use case. This composable architecture enables robust customization. The SDK provides abstractions for permissioning, governance, state management, account abstraction, tokenization processes, application logic, and more.\n\nCosmos SDK blockchains get interoperability out-of-the-box via a native integration with the [Inter-Blockchain Communication Protocol (IBC)](https://github.com/cosmos/ibc-go). ibc-go is implemented as a Go module in the Cosmos SDK. \n\nWhile the Cosmos SDK is plug-and-play with any consensus engine, we recommend using [CometBFT](https://github.com/cometbft/cometbft) for a fast, battle-tested, high-throughput, configurable BFT state machine. CometBFT is developed as part of the Cosmos Stack and its releases are updated alongside the SDK.\n\n## Quick Start\n\nTo learn how the Cosmos SDK works from a high-level perspective, see the Cosmos SDK [High-Level Intro](https://docs.cosmos.network/sdk/latest/learn/intro/sdk-app-architecture).\n\nIf you want to get started quickly and learn how to build on top of Cosmos SDK, visit [the Cosmos SDK Tutorial](https://docs.cosmos.network/sdk/latest/tutorials/example/00-overview).\n\nNote: We advise to always use the latest maintained [Go version](https://go.dev/dl/) for building Cosmos SDK applications.\n\n## Modules\n\nThe Cosmos SDK maintains a set of modules that can be included in your blockchain application.  For more information\non modules, see our [introduction doc](./x/README.md).\n\n## Enterprise Modules\n\nIn addition to the core SDK modules, we maintain enterprise-grade modules designed for specialized use cases such as permissioned networks and consortium chains. These modules are located in the `enterprise/` directory and have different licensing terms than the core SDK.\n\n## Maintainers\n[Cosmos Labs](https://cosmos.network/) maintains the core components of the stack: Cosmos SDK, CometBFT, IBC, Cosmos EVM, and various developer tools and frameworks. The detailed maintenance policy can be found [here](https://github.com/cosmos/security/blob/main/POLICY.md). In addition to developing and maintaining the Cosmos Stack, Cosmos Labs provides advisory and engineering services for blockchain solutions. [Get in touch with Cosmos Labs](https://cosmos.network/contact).\n\nCosmos Labs is a wholly-owned subsidiary of the [Interchain Foundation](https://interchain.io/), the Swiss nonprofit responsible for treasury management, funding public goods, and supporting governance for Cosmos. \n\nThe Cosmos Stack is supported by a robust community of open-source contributors. \n\n## History\n\nThe Cosmos SDK was first released in 2019, and the first blockchain to use the SDK in production was the [Cosmos Hub](https://hub.cosmos.network/main). Today, the Cosmos SDK is a popular, battle-tested, open-source framework used by hundreds of chains.\n\nThe Cosmos Hub still receives the most up-to-date Cosmos SDK versions. The Cosmos Hub application, `gaia`, has its own [cosmos/gaia repository](https://github.com/cosmos/gaia). \n\n## Developer Community and Support\n\nThe issue list of this repo is exclusively for bug reports and feature requests. We have active, helpful communities on Discord, Telegram, and Slack.\n\n**| Need Help? | Support \u0026 Community: [Discord](https://discord.com/invite/interchain) - [Telegram](https://t.me/CosmosOG) - [Talk to an Expert](https://cosmos.network/interest-form) - [Join the #Cosmos-tech Slack Channel](https://forms.gle/A8jawLgB8zuL1FN36) |**\n\n## Documentation and Resources\n\n**View the Cosmos SDK documentation: https://docs.cosmos.network/**\n\n### Cosmos Stack Libraries\n\n- [CometBFT](https://github.com/cometbft/cometbft) - High-performance, 10k+ TPS configurable BFT consensus engine.\n- [The Inter-Blockchain Communication Protocol (IBC)](https://github.com/cosmos/ibc-go/) - A blockchain interoperability protocol that allows blockchains to transfer any type of data encoded in bytes.\n- [Cosmos EVM](https://github.com/cosmos/evm) - Native EVM layer for Cosmos SDK chains. \n\n## Disambiguation\n\nThis Cosmos SDK project is not related to the [React-Cosmos](https://github.com/react-cosmos/react-cosmos) project (yet). Many thanks to Evan Coury and Ovidiu (@skidding) for this Github organization name. As per our agreement, this disambiguation notice will stay here.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcosmos%2Fcosmos-sdk","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcosmos%2Fcosmos-sdk","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcosmos%2Fcosmos-sdk/lists"}