{"id":13623136,"url":"https://github.com/filecoin-project/lotus","last_synced_at":"2026-10-19T01:40:00.673Z","repository":{"id":37420284,"uuid":"193681111","full_name":"filecoin-project/lotus","owner":"filecoin-project","description":"Reference implementation of the Filecoin protocol, written in Go","archived":false,"fork":false,"pushed_at":"2026-10-10T15:17:49.000Z","size":369178,"stargazers_count":2988,"open_issues_count":635,"forks_count":1385,"subscribers_count":123,"default_branch":"master","last_synced_at":"2026-10-12T04:44:20.541Z","etag":null,"topics":["blockchain","filecoin","golang","ipfs"],"latest_commit_sha":null,"homepage":"https://lotus.filecoin.io/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/filecoin-project.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":".github/copilot-instructions.md","dco":null,"cla":null,"disclosure":null}},"created_at":"2019-06-25T09:52:07.000Z","updated_at":"2026-10-10T14:33:18.000Z","dependencies_parsed_at":"2026-09-25T06:30:27.233Z","dependency_job_id":null,"html_url":"https://github.com/filecoin-project/lotus","commit_stats":{"total_commits":15953,"total_committers":316,"mean_commits":"50.484177215189874","dds":0.7566601893060867,"last_synced_commit":"471819bf1ef8a4d5c7c0476a38ce9f5e23c59bfc"},"previous_names":["filecoin-project/go-lotus"],"tags_count":470,"template":false,"template_full_name":null,"purl":"pkg:github/filecoin-project/lotus","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/filecoin-project%2Flotus","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/filecoin-project%2Flotus/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/filecoin-project%2Flotus/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/filecoin-project%2Flotus/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/filecoin-project","download_url":"https://codeload.github.com/filecoin-project/lotus/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/filecoin-project%2Flotus/sbom","scorecard":{"id":399417,"data":{"date":"2025-08-11","repo":{"name":"github.com/filecoin-project/lotus","commit":"135de0a761108c6eaf4e453090b4502167c41304"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.8,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout '${{ github.event.inputs.head_commit_id || github.event.workflow_run.head_commit.id }}': .github/workflows/build-pulse.yml:39"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:149","Warn: no topLevel permission defined: .github/workflows/add-issues-and-prs-to-fs-project-board.yml:1","Info: topLevel 'actions' permission set to 'read': .github/workflows/build-pulse.yml:31","Info: topLevel 'contents' permission set to 'read': .github/workflows/build.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/builtin-actor-tests.yml:12","Warn: no topLevel permission defined: .github/workflows/changelog.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/check.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/create-release-issue.yml:49","Warn: no topLevel permission defined: .github/workflows/dependency-check.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker.yml:30","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:36","Info: topLevel 'contents' permission set to 'read': .github/workflows/reusable-test.yml:15","Info: topLevel 'actions' permission set to 'read': .github/workflows/sorted-pr-checks.yml:20","Info: topLevel 'checks' permission set to 'read': .github/workflows/sorted-pr-checks.yml:21","Info: topLevel 'contents' permission set to 'read': .github/workflows/stale.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/test.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/very-expensive-test.yml:15"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE-APACHE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.33.1 not signed: https://api.github.com/repos/filecoin-project/lotus/releases/236551958","Warn: release artifact miner/v1.33.1 not signed: https://api.github.com/repos/filecoin-project/lotus/releases/236551901","Warn: release artifact v1.33.1-rc1 not signed: https://api.github.com/repos/filecoin-project/lotus/releases/233818560","Warn: release artifact miner/v1.33.1-rc1 not signed: https://api.github.com/repos/filecoin-project/lotus/releases/233818472","Warn: release artifact v1.33.0 not signed: https://api.github.com/repos/filecoin-project/lotus/releases/217310060","Warn: release artifact v1.33.1 does not have provenance: https://api.github.com/repos/filecoin-project/lotus/releases/236551958","Warn: release artifact miner/v1.33.1 does not have provenance: https://api.github.com/repos/filecoin-project/lotus/releases/236551901","Warn: release artifact v1.33.1-rc1 does not have provenance: https://api.github.com/repos/filecoin-project/lotus/releases/233818560","Warn: release artifact miner/v1.33.1-rc1 does not have provenance: https://api.github.com/repos/filecoin-project/lotus/releases/233818472","Warn: release artifact v1.33.0 does not have provenance: https://api.github.com/repos/filecoin-project/lotus/releases/217310060"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker.yml:33"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-pulse.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/build-pulse.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-pulse.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/build-pulse.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-pulse.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/build-pulse.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/builtin-actor-tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/builtin-actor-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/builtin-actor-tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/builtin-actor-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release-issue.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/create-release-issue.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-check.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/dependency-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/docker.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-title-check.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/pr-title-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-test.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/reusable-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sorted-pr-checks.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/sorted-pr-checks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/stale.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/very-expensive-test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/filecoin-project/lotus/very-expensive-test.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: containerImage not pinned by hash: Dockerfile:49","Warn: containerImage not pinned by hash: Dockerfile:68","Warn: containerImage not pinned by hash: Dockerfile:96","Warn: containerImage not pinned by hash: tools/dockers/docker-examples/basic-miner-busybox/Dockerfile:1: pin your Docker image by updating golang:1.14.1-buster to golang:1.14.1-buster@sha256:9d67058156a82fb59df9a734e3e9df6bfc73413bd4d5e279bbea4cdd04357f4c","Warn: containerImage not pinned by hash: tools/dockers/docker-examples/basic-miner-busybox/Dockerfile:55: pin your Docker image by updating busybox:1-glibc to busybox:1-glibc@sha256:facb103d02c3e0fcf34e272264b7d7deea98e1b2861075d2c9c4dd329d4c1c0d","Warn: downloadThenRun not pinned by hash: tools/dockers/docker-examples/basic-miner-busybox/Dockerfile:8","Warn: goCommand not pinned by hash: .github/workflows/reusable-test.yml:138","Warn: goCommand not pinned by hash: .github/workflows/test.yml:143","Info:   1 out of  49 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   8 third-party GitHubAction dependencies pinned","Info:   0 out of   6 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   1 out of   3 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(release/v1.31.1): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":6,"reason":"SAST tool is not run on all commits -- score normalized to 6","details":["Warn: 18 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-3218"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T19:46:32.861Z","repository_id":37420284,"created_at":"2025-08-18T19:46:32.861Z","updated_at":"2025-08-18T19:46:32.861Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38345276,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-18T02:00:06.448Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blockchain","filecoin","golang","ipfs"],"created_at":"2024-08-01T21:01:28.553Z","updated_at":"2026-10-19T01:40:00.660Z","avatar_url":"https://github.com/filecoin-project.png","language":"Go","funding_links":[],"categories":["Uncategorized","Go","代码下载地址","Projects","Networks / Blockchains","Networking and Distributed","Web 3.0"],"sub_categories":["Uncategorized","Distributed Systems"],"readme":"\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://lotus.filecoin.io/\" title=\"Filecoin Docs\"\u003e\n    \u003cimg src=\"documentation/images/lotus_logo_h.png\" alt=\"Project Lotus Logo\" width=\"244\" /\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n\u003ch1 align=\"center\"\u003eProject Lotus - 莲\u003c/h1\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/filecoin-project/lotus/actions/workflows/build.yml\"\u003e\u003cimg src=\"https://github.com/filecoin-project/lotus/actions/workflows/build.yml/badge.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://github.com/filecoin-project/lotus/actions/workflows/check.yml\"\u003e\u003cimg src=\"https://github.com/filecoin-project/lotus/actions/workflows/check.yml/badge.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://github.com/filecoin-project/lotus/actions/workflows/test.yml\"\u003e\u003cimg src=\"https://github.com/filecoin-project/lotus/actions/workflows/test.yml/badge.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://goreportcard.com/report/github.com/filecoin-project/lotus\"\u003e\u003cimg src=\"https://goreportcard.com/badge/github.com/filecoin-project/lotus\" /\u003e\u003c/a\u003e\n  \u003ca href=\"\"\u003e\u003cimg src=\"https://img.shields.io/badge/golang-%3E%3D1.26.8-blue.svg\" /\u003e\u003c/a\u003e\n  \u003cbr\u003e\n\u003c/p\u003e\n\nLotus is an implementation of the Filecoin Distributed Storage Network. For more details about Filecoin, check out the [Filecoin Spec](https://spec.filecoin.io).\n\n## Building \u0026 Documentation\n\n\u003e [!NOTE]\n\u003e The default `master` branch is the dev branch, please use with caution. For the latest stable version, checkout the [latest release](https://github.com/filecoin-project/lotus/blob/master/LOTUS_RELEASE_FLOW.md#why-is-the-releases-branch-deprecated-and-what-are-alternatives).\n\nFor complete instructions on how to build, install and setup lotus, please visit [https://lotus.filecoin.io](https://lotus.filecoin.io/lotus/install/prerequisites/#supported-platforms). Basic build instructions can be found further down in this readme.\n\n## Reporting a Vulnerability\n\nPlease send an email to security@filecoin.org. See our [security policy](SECURITY.md) for more details.\n\n## Related packages\n\nThese repos are independent and reusable modules, but are tightly integrated into Lotus to make up a fully featured Filecoin implementation:\n\n- [go-fil-markets](https://github.com/filecoin-project/go-fil-markets) which has its own [kanban work tracker available here](https://app.zenhub.com/workspaces/markets-shared-components-5daa144a7046a60001c6e253/board)\n- [builtin-actors](https://github.com/filecoin-project/builtin-actors)\n\n## Contributing\n\nWe welcome contributions to Lotus! Please see our [Contributing Guide](CONTRIBUTING.md) for more details on how to get started.\n\n## Basic Build Instructions\n**System-specific Software Dependencies**:\n\nBuilding Lotus requires some system dependencies, usually provided by your distribution.\n\nUbuntu/Debian:\n```\nsudo apt install mesa-opencl-icd ocl-icd-opencl-dev gcc git bzr jq pkg-config curl clang build-essential hwloc libhwloc-dev wget -y \u0026\u0026 sudo apt upgrade -y\n```\n\nFedora:\n```\nsudo dnf -y install gcc make git bzr jq pkgconfig mesa-libOpenCL mesa-libOpenCL-devel opencl-headers ocl-icd ocl-icd-devel clang llvm wget hwloc hwloc-devel\n```\n\nFor other distributions you can find the required dependencies [here.](https://lotus.filecoin.io/lotus/install/prerequisites/#supported-platforms) For instructions specific to macOS, you can find them [here.](https://lotus.filecoin.io/lotus/install/macos/)\n\n#### Go\n\nTo build Lotus, you need a working installation of [Go 1.26.8 or higher](https://golang.org/dl/):\n\n```bash\nwget -c https://golang.org/dl/go1.26.8.linux-amd64.tar.gz -O - | sudo tar -xz -C /usr/local\n```\n\n**TIP:**\nYou'll need to add `/usr/local/go/bin` to your path. For most Linux distributions you can run something like:\n\n```shell\necho \"export PATH=$PATH:/usr/local/go/bin\" \u003e\u003e ~/.bashrc \u0026\u0026 source ~/.bashrc\n```\n\nSee the [official Golang installation instructions](https://golang.org/doc/install) if you get stuck.\n\n### Build and install Lotus\n\nOnce all the dependencies are installed, you can build and install the Lotus suite (`lotus`, `lotus-miner`, and `lotus-worker`).\n\n1. Clone the repository:\n\n   ```sh\n   git clone https://github.com/filecoin-project/lotus.git\n   cd lotus/\n   ```\n\nNote: The default branch `master` is the dev branch where the latest new features, bug fixes and improvement are in. However, if you want to run lotus on Filecoin mainnet and want to run a production-ready lotus, get the [latest release](https://github.com/filecoin-project/lotus/blob/master/LOTUS_RELEASE_FLOW.md#why-is-the-releases-branch-deprecated-and-what-are-alternatives).\n\n2. To join mainnet, checkout the [latest release](https://github.com/filecoin-project/lotus/blob/master/LOTUS_RELEASE_FLOW.md#why-is-the-releases-branch-deprecated-and-what-are-alternatives).\n\n   If you are changing networks from a previous Lotus installation or there has been a network reset, read the [Switch networks guide](https://lotus.filecoin.io/lotus/manage/switch-networks/) before proceeding.\n\n   For networks other than mainnet, look up the current branch or tag/commit for the network you want to join in the [Filecoin networks dashboard](https://network.filecoin.io), then build Lotus for your specific network below.\n\n   ```sh\n   git checkout \u003ctag_or_branch\u003e\n   # For example:\n   git checkout \u003cvX.X.X\u003e # tag for a release\n   ```\n\n   Currently, the latest code on the _master_ branch corresponds to mainnet.\n\n3. If you are in China, see \"[Lotus: tips when running in China](https://lotus.filecoin.io/lotus/configure/nodes-in-china/)\".\n4. This build instruction uses the prebuilt proofs binaries. If you want to build the proof binaries from source check the [complete instructions](https://lotus.filecoin.io/lotus/install/prerequisites/). Note, if you are building the proof binaries from source, [installing rustup](https://lotus.filecoin.io/lotus/install/linux/#rustup) is also needed.\n\n5. Build and install Lotus:\n\n   ```sh\n   make clean all #mainnet\n\n   # Or to join a testnet or devnet:\n   make clean calibnet # Calibration with min 32GiB sectors\n\n   sudo make install\n   ```\n\n   This will put `lotus`, `lotus-miner` and `lotus-worker` in `/usr/local/bin`.\n\n   `lotus` will use the `$HOME/.lotus` folder by default for storage (configuration, chain data, wallets, etc). See [advanced options](https://lotus.filecoin.io/lotus/configure/defaults/#environment-variables) for information on how to customize the Lotus folder.\n\n6. You should now have Lotus installed. You can now [start the Lotus daemon and sync the chain](https://lotus.filecoin.io/lotus/install/linux/#start-the-lotus-daemon-and-sync-the-chain).\n\n7. (Optional) Follow the [Setting Up Prometheus and Grafana](https://github.com/filecoin-project/lotus/tree/master/metrics/README.md) guide for detailed instructions on setting up a working monitoring system running against a local running lotus node.\n\n## License\n\nDual-licensed under [MIT](https://github.com/filecoin-project/lotus/blob/master/LICENSE-MIT) + [Apache 2.0](https://github.com/filecoin-project/lotus/blob/master/LICENSE-APACHE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffilecoin-project%2Flotus","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffilecoin-project%2Flotus","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffilecoin-project%2Flotus/lists"}