{"id":13416212,"url":"https://github.com/dokku/dokku","last_synced_at":"2026-05-31T04:01:05.266Z","repository":{"id":8857442,"uuid":"10567197","full_name":"dokku/dokku","owner":"dokku","description":"A docker-powered PaaS that helps you build and manage the lifecycle of applications","archived":false,"fork":false,"pushed_at":"2026-05-30T02:55:28.000Z","size":24700,"stargazers_count":31907,"open_issues_count":20,"forks_count":2040,"subscribers_count":336,"default_branch":"master","last_synced_at":"2026-05-30T03:08:38.755Z","etag":null,"topics":["buildpack","containers","devops","docker","dokku","heroku","kubernetes","nomad","paas","self-hosted","selfhosted"],"latest_commit_sha":null,"homepage":"https://dokku.com","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dokku.png","metadata":{"files":{"readme":"README.md","changelog":"HISTORY.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"dokku","open_collective":"dokku","patreon":"dokku"}},"created_at":"2013-06-08T10:26:57.000Z","updated_at":"2026-05-30T02:53:45.000Z","dependencies_parsed_at":"2024-02-19T19:17:18.572Z","dependency_job_id":"90a5c10b-85ee-4af1-a05b-99b231ebbcfd","html_url":"https://github.com/dokku/dokku","commit_stats":{"total_commits":7487,"total_committers":568,"mean_commits":"13.181338028169014","dds":0.4733538132763456,"last_synced_commit":"7948a3cba7ab5393be225d2d93f7f251750e256f"},"previous_names":["progrium/dokku"],"tags_count":338,"template":false,"template_full_name":null,"purl":"pkg:github/dokku/dokku","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dokku%2Fdokku","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dokku%2Fdokku/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dokku%2Fdokku/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dokku%2Fdokku/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dokku","download_url":"https://codeload.github.com/dokku/dokku/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dokku%2Fdokku/sbom","scorecard":{"id":138927,"data":{"date":"2025-08-11","repo":{"name":"github.com/dokku/dokku","commit":"6ec9bc800df9b004b104a664557accde5509a878"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Code-Review","score":2,"reason":"Found 1/5 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'checks' permission set to 'write': .github/workflows/ci.yml:227","Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/dokku/.github/SECURITY.md:1","Info: Found linked content: github.com/dokku/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/dokku/.github/SECURITY.md:1","Info: Found text in security policy: github.com/dokku/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":10,"reason":"SAST tool detected","details":["Info: SAST configuration detected: CodeQL","Info: SAST configuration detected: Hadolint","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/dokku/dokku/release.yml/master?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:1: pin your Docker image by updating dokku/dokku:latest to dokku/dokku:latest@sha256:783e2569f86840c58d359b178d450864ac1eaa2de3dd899f68371a8b19895f5e","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating phusion/baseimage:noble-1.0.2 to phusion/baseimage:noble-1.0.2@sha256:b1b968db1eb391059048211e18df74062aa0777ffaecfd55f120ca34fdeb0630","Warn: containerImage not pinned by hash: contrib/build-base.Dockerfile:1: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:7c06e91f61fa88c08cc74f7e1b7c69ae24910d745357e0dfe1d2c0322aaf20f9","Warn: containerImage not pinned by hash: contrib/build-dokku.Dockerfile:1","Warn: containerImage not pinned by hash: contrib/build-dokku.Dockerfile:26","Warn: containerImage not pinned by hash: contrib/build-dokku.Dockerfile:41","Warn: containerImage not pinned by hash: docs/_build/Dockerfile:1: pin your Docker image by updating python:3.13.6-alpine to python:3.13.6-alpine@sha256:af1fd7a973d8adc761ee6b9d362b99329b39eb096ea3c53b8838f99bd187011e","Warn: containerImage not pinned by hash: docs/deployment/builders/dockerfiles.md:133: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:7c06e91f61fa88c08cc74f7e1b7c69ae24910d745357e0dfe1d2c0322aaf20f9","Warn: containerImage not pinned by hash: docs/deployment/builders/dockerfiles.md:145: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:7c06e91f61fa88c08cc74f7e1b7c69ae24910d745357e0dfe1d2c0322aaf20f9","Warn: containerImage not pinned by hash: docs/deployment/builders/dockerfiles.md:174: pin your Docker image by updating debian:latest to debian:latest@sha256:6d87375016340817ac2391e670971725a9981cfc24e221c47734681ed0f6c0f5","Warn: containerImage not pinned by hash: plugins/builder-dockerfile/dockerfiles/builder-release.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/builder-herokuish/dockerfiles/builder-pre-release.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/builder-herokuish/dockerfiles/builder-release.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/builder-herokuish/dockerfiles/copy-source.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/builder-herokuish/dockerfiles/pre-build.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/builder-lambda/dockerfiles/builder-release.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/builder-nixpacks/dockerfiles/builder-build.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/builder-nixpacks/dockerfiles/builder-release.Dockerfile:2","Warn: containerImage not pinned by hash: plugins/caddy-vhosts/Dockerfile:1: pin your Docker image by updating lucaslorentz/caddy-docker-proxy:2.10 to lucaslorentz/caddy-docker-proxy:2.10@sha256:a255f6712f0e576f90d2a1919fc930783121e0ac5c7767a562ad12c480c5ac20","Warn: containerImage not pinned by hash: plugins/haproxy-vhosts/Dockerfile:1: pin your Docker image by updating byjg/easy-haproxy:4.5.0 to byjg/easy-haproxy:4.5.0@sha256:55030f152a5861027f2c12ca2cdf84f1abbc88f2b8788bfc9e2fabc97d06015b","Warn: containerImage not pinned by hash: plugins/logs/Dockerfile:1: pin your Docker image by updating timberio/vector:0.48.0-debian to timberio/vector:0.48.0-debian@sha256:dae36da06c37c1c17d00c0fcf004925768d32161a4ccd3068cd9745a528f0fbd","Warn: containerImage not pinned by hash: plugins/openresty-vhosts/Dockerfile:1: pin your Docker image by updating dokku/openresty-docker-proxy:0.9.3 to dokku/openresty-docker-proxy:0.9.3@sha256:8d9f5d65986b423b07cad6f855b29c8f5d4110bc8f68fb8669c70d4fbd34e866","Warn: containerImage not pinned by hash: plugins/traefik-vhosts/Dockerfile:1: pin your Docker image by updating traefik:3.5.0 to traefik:3.5.0@sha256:4e7175cfe19be83c6b928cae49dde2f2788fb307189a4dc9550b67acf30c11a5","Warn: containerImage not pinned by hash: tests/apps/dockerfile-app-json-formations/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:e8e882c692a08878d55ec8ff6c5a4a71b3edca25eda0af4406e2a160d8a93cf2","Warn: containerImage not pinned by hash: tests/apps/dockerfile-entrypoint/Dockerfile:1: pin your Docker image by updating ruby:3.4.5 to ruby:3.4.5@sha256:9d7bcd3a8b3af5308faa43080f0e3e0d60a8c09897acd121973c761b348417b2","Warn: containerImage not pinned by hash: tests/apps/dockerfile-noexpose/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:e8e882c692a08878d55ec8ff6c5a4a71b3edca25eda0af4406e2a160d8a93cf2","Warn: containerImage not pinned by hash: tests/apps/dockerfile-procfile-bad/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:e8e882c692a08878d55ec8ff6c5a4a71b3edca25eda0af4406e2a160d8a93cf2","Warn: containerImage not pinned by hash: tests/apps/dockerfile-procfile/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:e8e882c692a08878d55ec8ff6c5a4a71b3edca25eda0af4406e2a160d8a93cf2","Warn: containerImage not pinned by hash: tests/apps/dockerfile-release/Dockerfile:1: pin your Docker image by updating python:3.13.6-bookworm to python:3.13.6-bookworm@sha256:50888474e16c53b1ba388ff1ac65e7dae3529960b73c2fc61cd93185dc28cb70","Warn: containerImage not pinned by hash: tests/apps/dockerfile/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:e8e882c692a08878d55ec8ff6c5a4a71b3edca25eda0af4406e2a160d8a93cf2","Warn: containerImage not pinned by hash: tests/apps/dockerfile/second.Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:e8e882c692a08878d55ec8ff6c5a4a71b3edca25eda0af4406e2a160d8a93cf2","Warn: containerImage not pinned by hash: tests/apps/go-fail-postdeploy/Dockerfile:1: pin your Docker image by updating golang:1.24.6 to golang:1.24.6@sha256:61808652990bcaa6981db6a85ecd0099c8fa10a6d49c3bd40194c00b69917856","Warn: containerImage not pinned by hash: tests/apps/go-fail-predeploy/Dockerfile:1: pin your Docker image by updating golang:1.24.6 to golang:1.24.6@sha256:61808652990bcaa6981db6a85ecd0099c8fa10a6d49c3bd40194c00b69917856","Warn: containerImage not pinned by hash: tests/apps/gogrpc/Dockerfile:1: pin your Docker image by updating golang:1.24.6 to golang:1.24.6@sha256:61808652990bcaa6981db6a85ecd0099c8fa10a6d49c3bd40194c00b69917856","Warn: containerImage not pinned by hash: tests/apps/python/alt.Dockerfile:1: pin your Docker image by updating python:3.12.6-bookworm to python:3.12.6-bookworm@sha256:78409b7acdc408ff1dbdc936e246edcb07bba423581db47399f7db3ecad68852","Warn: containerImage not pinned by hash: tests/apps/python/dockerfile.Dockerfile:1: pin your Docker image by updating python:3.12.6-bookworm to python:3.12.6-bookworm@sha256:78409b7acdc408ff1dbdc936e246edcb07bba423581db47399f7db3ecad68852","Warn: containerImage not pinned by hash: tests/apps/python/expose.Dockerfile:1: pin your Docker image by updating python:3.12.6-bookworm to python:3.12.6-bookworm@sha256:78409b7acdc408ff1dbdc936e246edcb07bba423581db47399f7db3ecad68852","Warn: containerImage not pinned by hash: tests/apps/zombies-dockerfile-no-tini/Dockerfile:1: pin your Docker image by updating golang:1.24.6 to golang:1.24.6@sha256:61808652990bcaa6981db6a85ecd0099c8fa10a6d49c3bd40194c00b69917856","Warn: containerImage not pinned by hash: tests/apps/zombies-dockerfile-tini/Dockerfile:1: pin your Docker image by updating golang:1.24.6 to golang:1.24.6@sha256:61808652990bcaa6981db6a85ecd0099c8fa10a6d49c3bd40194c00b69917856","Warn: goCommand not pinned by hash: .devcontainer/Dockerfile:17","Warn: pipCommand not pinned by hash: docs/_build/Dockerfile:7-8","Warn: npmCommand not pinned by hash: tests/apps/dockerfile-app-json-formations/Dockerfile:11","Warn: npmCommand not pinned by hash: tests/apps/dockerfile-noexpose/Dockerfile:7","Warn: npmCommand not pinned by hash: tests/apps/dockerfile-procfile-bad/Dockerfile:11","Warn: npmCommand not pinned by hash: tests/apps/dockerfile-procfile/Dockerfile:11","Warn: pipCommand not pinned by hash: tests/apps/dockerfile-release/Dockerfile:3","Warn: npmCommand not pinned by hash: tests/apps/dockerfile/Dockerfile:11","Warn: npmCommand not pinned by hash: tests/apps/dockerfile/second.Dockerfile:11","Warn: goCommand not pinned by hash: .devcontainer/bin/setup-dev-env:4","Warn: goCommand not pinned by hash: .devcontainer/bin/setup-dev-env:5","Warn: goCommand not pinned by hash: .devcontainer/bin/setup-dev-env:6","Warn: downloadThenRun not pinned by hash: bootstrap.sh:181","Warn: downloadThenRun not pinned by hash: tests/unit/test_helper.bash:659","Warn: npmCommand not pinned by hash: .github/workflows/lint.yml:42","Info:   0 out of  32 GitHub-owned GitHubAction dependencies pinned","Info:   4 out of  13 third-party GitHubAction dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned","Info:   0 out of   7 npmCommand dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned","Info:   0 out of  39 containerImage dependencies pinned","Info:   5 out of   9 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"13 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9h84-qmv7-982p","Warn: Project is vulnerable to: GHSA-f9f8-9pmf-xv68","Warn: Project is vulnerable to: GO-2025-3521","Warn: Project is vulnerable to: GO-2025-3547","Warn: Project is vulnerable to: GHSA-qh8g-58pp-2wxh","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx","Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v","Warn: Project is vulnerable to: GHSA-mrqx-rp3w-jpjp","Warn: Project is vulnerable to: GHSA-h7vf-5wrv-9fhv","Warn: Project is vulnerable to: GHSA-hxx2-7vcw-mqr3"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-16T07:26:21.945Z","repository_id":8857442,"created_at":"2025-08-16T07:26:21.946Z","updated_at":"2025-08-16T07:26:21.946Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33718446,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-05-31T02:00:06.040Z","response_time":95,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["buildpack","containers","devops","docker","dokku","heroku","kubernetes","nomad","paas","self-hosted","selfhosted"],"created_at":"2024-07-30T21:00:55.520Z","updated_at":"2026-05-31T04:01:05.260Z","avatar_url":"https://github.com/dokku.png","language":"Shell","funding_links":["https://github.com/sponsors/dokku","https://opencollective.com/dokku","https://patreon.com/dokku","https://www.patreon.com/dokku/","https://opencollective.com/dokku/backer/0/website","https://opencollective.com/dokku/backer/1/website","https://opencollective.com/dokku/backer/2/website","https://opencollective.com/dokku/backer/3/website","https://opencollective.com/dokku/backer/4/website","https://opencollective.com/dokku/backer/5/website","https://opencollective.com/dokku/backer/6/website","https://opencollective.com/dokku/backer/7/website","https://opencollective.com/dokku/backer/8/website","https://opencollective.com/dokku/backer/9/website","https://opencollective.com/dokku/backer/10/website","https://opencollective.com/dokku/backer/11/website","https://opencollective.com/dokku/backer/12/website","https://opencollective.com/dokku/backer/13/website","https://opencollective.com/dokku/backer/14/website","https://opencollective.com/dokku/backer/15/website","https://opencollective.com/dokku/backer/16/website","https://opencollective.com/dokku/backer/17/website","https://opencollective.com/dokku/backer/18/website","https://opencollective.com/dokku/backer/19/website","https://opencollective.com/dokku/backer/20/website","https://opencollective.com/dokku/backer/21/website","https://opencollective.com/dokku/backer/22/website","https://opencollective.com/dokku/backer/23/website","https://opencollective.com/dokku/backer/24/website","https://opencollective.com/dokku/backer/25/website","https://opencollective.com/dokku/backer/26/website","https://opencollective.com/dokku/backer/27/website","https://opencollective.com/dokku/backer/28/website","https://opencollective.com/dokku/backer/29/website"],"categories":["Shell","Container Operations","HarmonyOS","Docker","By Language","docker","开发辅助","网络服务","For Developers","DevOps tools","kubernetes","Uncategorized","devops","Containers","3.2 PaaS","Running Containers","Platforms services and devops","Backend \u0026 Infrastructure","🚀 DevOps \u0026 Infrastructure","SaaS/PaaS Alternatives"],"sub_categories":["PaaS","Windows Manager","Framework","Shell","网络服务_其他","Directory Navigation","User Interfaces and Dashboards","Uncategorized","3.1 api gateway","Deployment \u0026 Platforms","Platform as a Service / PaaS (Heroku, Fly, Render... alternatives):","Heroku"],"readme":"# Dokku\n\n[![Build Status](https://github.com/dokku/dokku/actions/workflows/ci.yml/badge.svg?branch=master)](https://github.com/dokku/dokku/actions?query=branch%3Amaster)\n[![Ubuntu Package](https://img.shields.io/badge/package-ubuntu-brightgreen.svg?style=flat-square \"Ubuntu Package\")](https://packagecloud.io/dokku/dokku)\n[![Arch Package](https://img.shields.io/badge/package-arch-brightgreen.svg?style=flat-square \"Arch Package\")](https://aur.archlinux.org/packages/dokku/)\n[![Slack Group](https://img.shields.io/badge/irc-slack-blue.svg?style=flat-square \"Slack Group\")](https://slack.dokku.com/)\n[![Documentation](https://img.shields.io/badge/docs-site-blue.svg?style=flat-square \"Site\")](https://dokku.com/docs/getting-started/installation/)\n[![OpenCollective](https://opencollective.com/dokku/sponsors/badge.svg?style=flat-square)](#sponsors)\n[![OpenCollective](https://opencollective.com/dokku/backers/badge.svg?style=flat-square)](#backers)\n[![Patreon](https://img.shields.io/badge/patreon-donate-green.svg?style=flat-square)](https://www.patreon.com/dokku/)\n\nDocker powered mini-Heroku. The smallest PaaS implementation you've ever seen.\n\n## Sponsors\n\nBecome a sponsor and get your logo on our README on GitHub with a link to your site. [[Become a sponsor](https://opencollective.com/dokku#sponsor)]\n\n[![OpenCollective Sponsor 0](https://opencollective.com/dokku/sponsor/0/avatar.svg)](https://opencollective.com/dokku/sponsor/0/website)\n[![OpenCollective Sponsor 1](https://opencollective.com/dokku/sponsor/1/avatar.svg)](https://opencollective.com/dokku/sponsor/1/website)\n[![OpenCollective Sponsor 2](https://opencollective.com/dokku/sponsor/2/avatar.svg)](https://opencollective.com/dokku/sponsor/2/website)\n[![OpenCollective Sponsor 3](https://opencollective.com/dokku/sponsor/3/avatar.svg)](https://opencollective.com/dokku/sponsor/3/website)\n[![OpenCollective Sponsor 4](https://opencollective.com/dokku/sponsor/4/avatar.svg)](https://opencollective.com/dokku/sponsor/4/website)\n[![OpenCollective Sponsor 5](https://opencollective.com/dokku/sponsor/5/avatar.svg)](https://opencollective.com/dokku/sponsor/5/website)\n[![OpenCollective Sponsor 6](https://opencollective.com/dokku/sponsor/6/avatar.svg)](https://opencollective.com/dokku/sponsor/6/website)\n[![OpenCollective Sponsor 7](https://opencollective.com/dokku/sponsor/7/avatar.svg)](https://opencollective.com/dokku/sponsor/7/website)\n[![OpenCollective Sponsor 8](https://opencollective.com/dokku/sponsor/8/avatar.svg)](https://opencollective.com/dokku/sponsor/8/website)\n[![OpenCollective Sponsor 9](https://opencollective.com/dokku/sponsor/9/avatar.svg)](https://opencollective.com/dokku/sponsor/9/website)\n[![OpenCollective Sponsor 10](https://opencollective.com/dokku/sponsor/10/avatar.svg)](https://opencollective.com/dokku/sponsor/10/website)\n[![OpenCollective Sponsor 11](https://opencollective.com/dokku/sponsor/11/avatar.svg)](https://opencollective.com/dokku/sponsor/11/website)\n[![OpenCollective Sponsor 12](https://opencollective.com/dokku/sponsor/12/avatar.svg)](https://opencollective.com/dokku/sponsor/12/website)\n[![OpenCollective Sponsor 13](https://opencollective.com/dokku/sponsor/13/avatar.svg)](https://opencollective.com/dokku/sponsor/13/website)\n[![OpenCollective Sponsor 14](https://opencollective.com/dokku/sponsor/14/avatar.svg)](https://opencollective.com/dokku/sponsor/14/website)\n[![OpenCollective Sponsor 15](https://opencollective.com/dokku/sponsor/15/avatar.svg)](https://opencollective.com/dokku/sponsor/5/website)\n[![OpenCollective Sponsor 6](https://opencollective.com/dokku/sponsor/16/avatar.svg)](https://opencollective.com/dokku/sponsor/16/website)\n[![OpenCollective Sponsor 17](https://opencollective.com/dokku/sponsor/17/avatar.svg)](https://opencollective.com/dokku/sponsor/17/website)\n[![OpenCollective Sponsor 18](https://opencollective.com/dokku/sponsor/18/avatar.svg)](https://opencollective.com/dokku/sponsor/18/website)\n\n## Backers\n\nSupport us with a monthly donation and help us continue our activities. [[Become a backer](https://opencollective.com/dokku#backer)]\n\n[![OpenCollective Backer 0](https://opencollective.com/dokku/backer/0/avatar.svg)](https://opencollective.com/dokku/backer/0/website)\n[![OpenCollective Backer 1](https://opencollective.com/dokku/backer/1/avatar.svg)](https://opencollective.com/dokku/backer/1/website)\n[![OpenCollective Backer 2](https://opencollective.com/dokku/backer/2/avatar.svg)](https://opencollective.com/dokku/backer/2/website)\n[![OpenCollective Backer 3](https://opencollective.com/dokku/backer/3/avatar.svg)](https://opencollective.com/dokku/backer/3/website)\n[![OpenCollective Backer 4](https://opencollective.com/dokku/backer/4/avatar.svg)](https://opencollective.com/dokku/backer/4/website)\n[![OpenCollective Backer 5](https://opencollective.com/dokku/backer/5/avatar.svg)](https://opencollective.com/dokku/backer/5/website)\n[![OpenCollective Backer 6](https://opencollective.com/dokku/backer/6/avatar.svg)](https://opencollective.com/dokku/backer/6/website)\n[![OpenCollective Backer 7](https://opencollective.com/dokku/backer/7/avatar.svg)](https://opencollective.com/dokku/backer/7/website)\n[![OpenCollective Backer 8](https://opencollective.com/dokku/backer/8/avatar.svg)](https://opencollective.com/dokku/backer/8/website)\n[![OpenCollective Backer 9](https://opencollective.com/dokku/backer/9/avatar.svg)](https://opencollective.com/dokku/backer/9/website)\n[![OpenCollective Backer 10](https://opencollective.com/dokku/backer/10/avatar.svg)](https://opencollective.com/dokku/backer/10/website)\n[![OpenCollective Backer 11](https://opencollective.com/dokku/backer/11/avatar.svg)](https://opencollective.com/dokku/backer/11/website)\n[![OpenCollective Backer 12](https://opencollective.com/dokku/backer/12/avatar.svg)](https://opencollective.com/dokku/backer/12/website)\n[![OpenCollective Backer 13](https://opencollective.com/dokku/backer/13/avatar.svg)](https://opencollective.com/dokku/backer/13/website)\n[![OpenCollective Backer 14](https://opencollective.com/dokku/backer/14/avatar.svg)](https://opencollective.com/dokku/backer/14/website)\n[![OpenCollective Backer 15](https://opencollective.com/dokku/backer/15/avatar.svg)](https://opencollective.com/dokku/backer/15/website)\n[![OpenCollective Backer 16](https://opencollective.com/dokku/backer/16/avatar.svg)](https://opencollective.com/dokku/backer/16/website)\n[![OpenCollective Backer 17](https://opencollective.com/dokku/backer/17/avatar.svg)](https://opencollective.com/dokku/backer/17/website)\n[![OpenCollective Backer 18](https://opencollective.com/dokku/backer/18/avatar.svg)](https://opencollective.com/dokku/backer/18/website)\n[![OpenCollective Backer 19](https://opencollective.com/dokku/backer/19/avatar.svg)](https://opencollective.com/dokku/backer/19/website)\n[![OpenCollective Backer 20](https://opencollective.com/dokku/backer/20/avatar.svg)](https://opencollective.com/dokku/backer/20/website)\n[![OpenCollective Backer 21](https://opencollective.com/dokku/backer/21/avatar.svg)](https://opencollective.com/dokku/backer/21/website)\n[![OpenCollective Backer 22](https://opencollective.com/dokku/backer/22/avatar.svg)](https://opencollective.com/dokku/backer/22/website)\n[![OpenCollective Backer 23](https://opencollective.com/dokku/backer/23/avatar.svg)](https://opencollective.com/dokku/backer/23/website)\n[![OpenCollective Backer 24](https://opencollective.com/dokku/backer/24/avatar.svg)](https://opencollective.com/dokku/backer/24/website)\n[![OpenCollective Backer 25](https://opencollective.com/dokku/backer/25/avatar.svg)](https://opencollective.com/dokku/backer/25/website)\n[![OpenCollective Backer 26](https://opencollective.com/dokku/backer/26/avatar.svg)](https://opencollective.com/dokku/backer/26/website)\n[![OpenCollective Backer 27](https://opencollective.com/dokku/backer/27/avatar.svg)](https://opencollective.com/dokku/backer/27/website)\n[![OpenCollective Backer 28](https://opencollective.com/dokku/backer/28/avatar.svg)](https://opencollective.com/dokku/backer/28/website)\n[![OpenCollective Backer 29](https://opencollective.com/dokku/backer/29/avatar.svg)](https://opencollective.com/dokku/backer/29/website)\n\n## Requirements\n\nA fresh VM running any of the following operating systems:\n\n- Ubuntu 22.04 / 24.04 (amd64/arm64) - Any currently supported release\n- Debian 11+ (amd64/arm64)\n\nAn SSH keypair that can be used for application deployment. If this exists before installation, it will be automatically imported into dokku.\nOtherwise, you will need to import the keypair manually after installation using `dokku ssh-keys:add`.\n\n## Installation\n\nTo install the latest stable release, run the following commands as a user who has access to `sudo`:\n\n```shell\nwget -NP . https://dokku.com/install/v0.38.14/bootstrap.sh\nsudo DOKKU_TAG=v0.38.14 bash bootstrap.sh\n```\n\nYou can then proceed to configure your server domain (via `dokku domains:set-global`) and user access (via `dokku ssh-keys:add`) to complete the installation.\n\nIf you wish for a more unattended installation method, see [these](https://dokku.com/docs/getting-started/install/debian/#unattended-installation) docs.\n\n### Upgrade\n\n[View the docs](https://dokku.com/docs/getting-started/upgrading/) for upgrading from an older version of Dokku.\n\n## Documentation\n\nFull documentation - including advanced installation docs - are available online at \u003chttps://dokku.com/docs/getting-started/installation/\u003e.\n\n## Support\n\nYou can use [GitHub Issues](https://github.com/dokku/dokku/issues), check [Troubleshooting](https://dokku.com/docs/getting-started/troubleshooting/) in the documentation, or join us on [Gliderlabs Slack in the #dokku channel](https://slack.dokku.com/).\n\n## Contribution\n\nAfter checking [GitHub Issues](https://github.com/dokku/dokku/issues), the [Troubleshooting Guide](https://dokku.com/docs/getting-started/troubleshooting/) or having a chat with us on [Gliderlabs Slack in the #dokku channel](https://slack.dokku.com/), feel free to fork and create a Pull Request.\n\nWhile we may not merge your PR as is, they serve to start conversations and improve the general Dokku experience for all users.\n\n## License\n\n[MIT License](https://github.com/dokku/dokku/blob/master/LICENSE) © Jeff Lindsay\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdokku%2Fdokku","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdokku%2Fdokku","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdokku%2Fdokku/lists"}