{"id":33918817,"url":"https://github.com/fluvio-community/fluvio","last_synced_at":"2026-03-09T20:02:44.067Z","repository":{"id":37029658,"uuid":"205473061","full_name":"fluvio-community/fluvio","owner":"fluvio-community","description":"🦀 event stream processing for developers to collect and transform data in motion to power responsive data intensive applications.","archived":false,"fork":false,"pushed_at":"2025-12-16T19:28:53.000Z","size":35940,"stargazers_count":5137,"open_issues_count":145,"forks_count":522,"subscribers_count":45,"default_branch":"master","last_synced_at":"2026-01-03T03:10:20.879Z","etag":null,"topics":["cloud-native","data-analytics","data-flow","data-integration","data-pipelines","distributed-systems","event-driven-architecture","real-time","rust","serverless","stateful","stream-processing","stream-processing-engine","streaming","streaming-analytics","streaming-data","streaming-data-pipelines","streaming-data-processing","webassembly"],"latest_commit_sha":null,"homepage":"https://www.fluvio.io/","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fluvio-community.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE-OF-CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-08-31T00:11:58.000Z","updated_at":"2026-01-02T08:26:35.000Z","dependencies_parsed_at":"2023-09-21T19:42:59.952Z","dependency_job_id":"f6ffee55-b88d-4866-b0f3-c6e5e718342d","html_url":"https://github.com/fluvio-community/fluvio","commit_stats":{"total_commits":2124,"total_committers":62,"mean_commits":34.25806451612903,"dds":0.6699623352165724,"last_synced_commit":"3bc85be53046eb15d279f24e870c160a2a8c7892"},"previous_names":["fluvio-community/fluvio","infinyon/fluvio"],"tags_count":191,"template":false,"template_full_name":null,"purl":"pkg:github/fluvio-community/fluvio","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fluvio-community%2Ffluvio","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fluvio-community%2Ffluvio/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fluvio-community%2Ffluvio/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fluvio-community%2Ffluvio/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fluvio-community","download_url":"https://codeload.github.com/fluvio-community/fluvio/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fluvio-community%2Ffluvio/sbom","scorecard":{"id":294689,"data":{"date":"2025-08-11","repo":{"name":"github.com/infinyon/fluvio","commit":"c2ab861e180937791323c65b5989a85b7fc545ca"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:1370","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/merge_queue.yaml:531","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yml:141","Warn: topLevel 'contents' permission set to 'write': .github/workflows/benchmarks.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cd_dev.yaml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/cd_dev_mac.yaml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/cd_release.yml:4","Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci_mac.yaml:7","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci_unused_deps.yml:4","Info: topLevel permissions set to 'read-all': .github/workflows/connector-publish.yml:3","Info: topLevel 'contents' permission set to 'read': .github/workflows/hourly.yml:4","Warn: no topLevel permission defined: .github/workflows/lint_pr.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/merge_queue.yaml:5","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish_crates.yml:4","Info: topLevel permissions set to 'read-all': .github/workflows/release.yml:3","Info: topLevel permissions set to 'read-all': .github/workflows/smartmodule-publish.yml:3","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/weekly.yml:4"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":4,"reason":"binaries present in source code","details":["Warn: binary detected: crates/fluvio-hub-util/tests/apackage/module.wasm:1","Warn: binary detected: crates/fluvio-hub-util/tests/sm_need_more_data.wasm:1","Warn: binary detected: crates/fluvio-hub-util/tests/sm_ok.wasm:1","Warn: binary detected: crates/fluvio-protocol/fixtures/smartmodule.wasm:1","Warn: binary detected: crates/fluvio-smartmodule/fixtures/smartmodule.wasm:1","Warn: binary detected: crates/fluvio-spu/src/services/public/tests/test_data/filter_missing_attribute.wasm:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/benchmarks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_dev.yaml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev_mac.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev_mac.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_dev_mac.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev_mac.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_dev_mac.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_dev_mac.yaml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_dev_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_release.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_release.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_release.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd_release.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd_release.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/cd_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:514: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:518: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:532: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:789: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:792: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:797: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:824: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1224: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:1226: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1232: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1238: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:1405: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:334: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:341: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:386: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:388: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:398: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:493: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:674: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:681: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:686: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:722: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:854: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:856: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:858: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:870: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:874: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:883: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:949: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:968: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1291: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1295: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1301: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:1334: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1357: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:310: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:312: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1011: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:1013: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1019: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1024: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:563: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:566: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:576: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:614: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:657: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:739: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:742: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:747: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:772: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:986: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:988: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:992: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1060: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:1062: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1068: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1073: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1123: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:1125: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1131: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1136: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1141: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:1146: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:269: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:273: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:287: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:312: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:320: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:337: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:377: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:220: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_mac.yaml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_mac.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_unused_deps.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_unused_deps.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_unused_deps.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_unused_deps.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_unused_deps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/ci_unused_deps.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/connector-publish.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/connector-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/connector-publish.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/connector-publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/connector-publish.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/connector-publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/connector-publish.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/connector-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/connector-publish.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/connector-publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/connector-publish.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/connector-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hourly.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hourly.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hourly.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hourly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hourly.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hourly.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hourly.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hourly.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hourly.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/hourly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint_pr.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/lint_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:392: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:394: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:399: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:454: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:560: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:361: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:434: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge_queue.yaml:517: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/merge_queue.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_crates.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish_crates.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_crates.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish_crates.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_crates.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/publish_crates.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/smartmodule-publish.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/smartmodule-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/smartmodule-publish.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/smartmodule-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/stale.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/weekly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/weekly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/weekly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/weekly.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/weekly.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/weekly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/weekly.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/infinyon/fluvio/weekly.yml/master?enable=pin","Warn: containerImage not pinned by hash: connector/docker/Dockerfile:1: pin your Docker image by updating debian:stable-slim to debian:stable-slim@sha256:8810492a2dd16b7f59239c1e0cc1e56c1a1a5957d11f639776bd6798e795608b","Warn: containerImage not pinned by hash: dev-tools/smartmodule.Dockerfile:15","Warn: containerImage not pinned by hash: examples/docker-compose/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: k8-util/docker/fluvio.Dockerfile:2","Warn: downloadThenRun not pinned by hash: connector/docker/Dockerfile:18","Warn: downloadThenRun not pinned by hash: dev-tools/smartmodule.Dockerfile:42","Warn: downloadThenRun not pinned by hash: dev-tools/smartmodule.Dockerfile:46","Warn: downloadThenRun not pinned by hash: examples/docker-compose/Dockerfile:5","Warn: downloadThenRun not pinned by hash: actions/action-install-fluvio-cluster.sh:8","Warn: downloadThenRun not pinned by hash: tests/cli/cli-backward-compatibility.bash:31","Warn: downloadThenRun not pinned by hash: tests/cli/test_helper/fluvio_dev.bash:58","Warn: downloadThenRun not pinned by hash: tests/cli/test_helper/fluvio_dev.bash:77","Warn: downloadThenRun not pinned by hash: tests/fluvio-validate-release.sh:13","Warn: downloadThenRun not pinned by hash: tests/upgrade-test.sh:67","Warn: downloadThenRun not pinned by hash: .github/workflows/cd_dev.yaml:83","Warn: downloadThenRun not pinned by hash: .github/workflows/cd_dev.yaml:154","Warn: downloadThenRun not pinned by hash: .github/workflows/cd_dev.yaml:209","Warn: downloadThenRun not pinned by hash: .github/workflows/cd_release.yml:77","Warn: downloadThenRun not pinned by hash: .github/workflows/cd_release.yml:106","Warn: downloadThenRun not pinned by hash: .github/workflows/cd_release.yml:155","Warn: downloadThenRun not pinned by hash: .github/workflows/ci.yml:1177","Warn: downloadThenRun not pinned by hash: .github/workflows/ci.yml:413","Warn: downloadThenRun not pinned by hash: .github/workflows/ci.yml:606","Warn: downloadThenRun not pinned by hash: .github/workflows/ci.yml:677","Warn: downloadThenRun not pinned by hash: .github/workflows/ci.yml:1081","Warn: downloadThenRun not pinned by hash: .github/workflows/ci.yml:1309","Warn: downloadThenRun not pinned by hash: .github/workflows/hourly.yml:150","Info:   0 out of 131 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  75 third-party GitHubAction dependencies pinned","Info:   0 out of   4 containerImage dependencies pinned","Info:   0 out of  23 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact dev not signed: https://api.github.com/repos/infinyon/fluvio/releases/237503245","Warn: release artifact v0.18.1 not signed: https://api.github.com/repos/infinyon/fluvio/releases/230125338","Warn: release artifact v0.18.1-dev-4 not signed: https://api.github.com/repos/infinyon/fluvio/releases/228912957","Warn: release artifact v0.18.1-dev-2 not signed: https://api.github.com/repos/infinyon/fluvio/releases/227499659","Warn: release artifact v0.18.1-dev-1 not signed: https://api.github.com/repos/infinyon/fluvio/releases/226541075","Warn: release artifact dev does not have provenance: https://api.github.com/repos/infinyon/fluvio/releases/237503245","Warn: release artifact v0.18.1 does not have provenance: https://api.github.com/repos/infinyon/fluvio/releases/230125338","Warn: release artifact v0.18.1-dev-4 does not have provenance: https://api.github.com/repos/infinyon/fluvio/releases/228912957","Warn: release artifact v0.18.1-dev-2 does not have provenance: https://api.github.com/repos/infinyon/fluvio/releases/227499659","Warn: release artifact v0.18.1-dev-1 does not have provenance: https://api.github.com/repos/infinyon/fluvio/releases/226541075"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:130"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: RUSTSEC-2025-0021 / GHSA-2frx-2596-x5r6","Warn: Project is vulnerable to: RUSTSEC-2024-0384","Warn: Project is vulnerable to: GHSA-4fcv-w3qc-ppgg","Warn: Project is vulnerable to: RUSTSEC-2025-0022","Warn: Project is vulnerable to: RUSTSEC-2024-0436","Warn: Project is vulnerable to: RUSTSEC-2023-0071","Warn: Project is vulnerable to: RUSTSEC-2023-0049","Warn: Project is vulnerable to: RUSTSEC-2025-0046 / GHSA-fm79-3f68-h2fc","Warn: Project is vulnerable to: RUSTSEC-2024-0320"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T19:10:32.825Z","repository_id":37029658,"created_at":"2025-08-17T19:10:32.825Z","updated_at":"2025-08-17T19:10:32.825Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28853196,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-28T15:15:36.453Z","status":"ssl_error","status_checked_at":"2026-01-28T15:15:13.020Z","response_time":57,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cloud-native","data-analytics","data-flow","data-integration","data-pipelines","distributed-systems","event-driven-architecture","real-time","rust","serverless","stateful","stream-processing","stream-processing-engine","streaming","streaming-analytics","streaming-data","streaming-data-pipelines","streaming-data-processing","webassembly"],"created_at":"2025-12-12T08:34:13.506Z","updated_at":"2026-03-09T20:02:44.036Z","avatar_url":"https://github.com/fluvio-community.png","language":"Rust","funding_links":[],"categories":["Libraries","distributed-systems","Rust","\u003ca name=\"Rust\"\u003e\u003c/a\u003eRust"],"sub_categories":["Data streaming"],"readme":"\u003cdiv align=\"center\"\u003e\n  \u003ch1\u003eFluvio\u003c/h1\u003e\n  \u003ca href=\"https://fluvio.io\" target=\"_blank\"\u003e\n    \u003cstrong\u003eComposable, Declarative, Stateful Data Streaming System\u003c/strong\u003e\n  \u003c/a\u003e\n  \u003cbr\u003e\n  \u003cbr\u003e\n\n[![CI Status](https://github.com/fluvio-community/fluvio/actions/workflows/hourly.yml/badge.svg)](https://github.com/fluvio-community/fluvio/actions/workflows/hourly.yml)\n  [![CD Status](https://github.com/fluvio-community/fluvio/workflows/CD_Dev/badge.svg)](https://github.com/fluvio-community/fluvio/actions/workflows/cd_dev.yaml)\n  [![fluvio Crates.io version](https://img.shields.io/crates/v/fluvio?style=flat)](https://crates.io/crates/fluvio)\n  [![Fluvio Rust documentation](https://docs.rs/fluvio/badge.svg)](https://docs.rs/fluvio)\n  [![Fluvio dependency status](https://deps.rs/repo/github/fluvio-community/fluvio/status.svg)](https://deps.rs/repo/github/fluvio-community/fluvio)\n  [![Fluvio Discord](https://img.shields.io/discord/695712741381636168.svg?logo=discord\u0026style=flat)](https://discordapp.com/invite/bBG2dTz)\n\n  \u003cbr\u003e\n\n  [![An animated visual of fluvio distributed streaming runtime](.github/assets/infinyon-fluvio-sdf.gif)](https://fluvio.io)\n\n  \u003cbr\u003e\n\u003c/div\u003e\n\n**Fluvio** is a lean and mean distributed data streaming engine written in Rust. Combined with **Stateful DataFlow** distributed stream processing framework, Fluvio provides a *unified* *composable* *distributed streaming* and *stream processin*g paradigm for developers.\n\n## Quick Start - Get started with Fluvio in 2 minutes or less!\n\n### Step 1. Download Fluvio Version Manager:\n\nFluvio is installed via the **Fluvio Version Manager**, shortened to `fvm`.\n\nTo install `fvm`, run the following command:\n\n**TEMPORARY NOTE**: While we are transitioning to a new fluvio-community hosted\nfluvio build and release, you should install the dev version of FVM:\n```bash\ncurl -fsS https://raw.githubusercontent.com/fluvio-community/fluvio/master/install.sh | FVM_VERSION=dev bash\n```\n\nAfter we get the fluvio-community based released sorted again, it will return to:\n\n```bash\ncurl -fsS https://raw.githubusercontent.com/fluvio-community/fluvio/master/install.sh | bash\n```\n\n\n\nAs part of the initial setup, `fvm` will also install the Fluvio CLI available in the stable channel as of the moment of installation.\n\nFluvio is stored in `$HOME/.fluvio`, with the executable binaries stored in `$HOME/.fluvio/bin`.\n\n\u003e For the best compatibliity on Windows, InfinyOn recommends WSL2\n\n### Step 2. Start a cluster:\n\nStart cluster on you local machine with the following command:\n\n```bash\nfluvio cluster start\n```\n\n### Step 3. Create Topic:\n\nThe following command will create a topic called hello-fluvio:\n\n```bash\nfluvio topic create hello-fluvio\n```\n\n### Step 4. Produce to Topic, Consume From Topic:\n\nProduce data to your topic. Run the command first and then type some messages:\n\n```bash\nfluvio produce hello-fluvio\n\u003e hello fluvio\nOk!\n\u003e test message\nOk!\n```\n\nConsume data from the topic, Run the following command in a different terminal:\n\n```bash\nfluvio consume hello-fluvio -B -d\n```\n\nJust like that! You have a local cluster running.\n\n## Using Pre-Built Fluvio Versions\n\nYou may want to use other Fluvio versions than the latest stable release. You can do so by specifying the version using environment variables.\n\n**Install Latest Dev Version**\n\nTo install the latest development build of fvm and fluvio:\n\n```bash\ncurl -fsS https://raw.githubusercontent.com/fluvio-community/fluvio/master/install.sh | FVM_VERSION=dev bash\n```\n\n**Install Specific Fluvio Version**\n\n```bash\ncurl -fsS https://raw.githubusercontent.com/fluvio-community/fluvio/master/install.sh | FLUVIO_VERSION=x.y.z bash\n```\n\n**Install Specific FVM Version**\n\n```bash\ncurl -fsS https://raw.githubusercontent.com/fluvio-community/fluvio/master/install.sh | FVM_VERSION=v0.18.1 bash\n```\n\n#### Check Fluvio Core Documentation\nFluvio documentation will provide additional context on how to use the Fluvio clusters, CLI, clients, a development kits.\n- [Fluvio overview](https://www.fluvio.io/docs/fluvio/overview)\n- [Fluvio CLI docs home](https://www.fluvio.io/docs/fluvio/cli/overview)\n- [Fluvio Architecture](https://www.fluvio.io/docs/fluvio/concepts/architecture/overview)\n\n#### Check Stateful DataFlow Documentation\nStateful DataFlow designed to handle complex data processing workflows, allowing for customization and scalability through various programming languages and system primitives.\n\n- [SDF quickstart](https://www.fluvio.io/sdf/quickstart/)\n- [SDF Architecture](https://www.fluvio.io/sdf/concepts/architecture)\n- [SDF Examples](https://github.com/infinyon/stateful-dataflows-examples/)\n\n#### Learn how to build custom connectors\nFluvio can connect to practically any system that you can think of.\n- For first party systems, fluvio clients can integrate with the edge system or application to source data.\n- For third party systems fluvio connectors connect at the protocol level and collects data into fluvio topics.\n\nOut of the box Fluvio has native http, webhook, mqtt, kafka inbound connectors. In terms of outbound connectors out of the box Fluvio supports http, SQL, kafka, and experimental builds of DuckDB, Redis, S3, Graphite etc.\n\nUsing Connector Development Kit, its intuitive to build connectors to any system fast.\n\nCheck out the docs and let us know if you need help building any connector.\n- [Connector docs](https://www.fluvio.io/docs/connectors/overview)\n- [Connector Development Kit (cdk) docs](https://www.fluvio.io/docs/connectors/cdk)\n\n#### Learn how to build custom smart modules\nFluvio applies wasm based stream processing and data transformations. We call these reusable transformation functions smart modules. Reusable Smart modules are built using Smart Module Development Kit and can be distributed using InfinyOn Cloud hub.\n\n- [Smart Modules docs](https://www.fluvio.io/docs/smartmodules/overview)\n- [Smart Modules Development Kit (smdk) docs](https://www.fluvio.io/docs/smartmodules/smdk)\n\n### Clients\n- [Fluvio Client API docs home](https://www.fluvio.io/docs/fluvio/apis/overview)\n\n**Language Specifc API docs:**\n- [Rust API docs](https://docs.rs/fluvio/latest/fluvio/)\n- [Python API docs](https://www.fluvio.io/docs/fluvio/apis/python/example)\n- [Javascript API docs](https://github.com/fluvio-community/fluvio-client-node)\n\n**Community Maintained:**\n- [Go API docs](https://github.com/avinassh/fluvio-go)\n- [Java API docs](https://github.com/infinyon/fluvio-client-java)\n- [Elixir API docs](https://github.com/viniarck/fluvio-ex)\n\n## Contributing\n\nIf you'd like to contribute to the project, please read our\n[Contributing guide](CONTRIBUTING.md).\n\n## Community\n\nMany fluvio users and developers have made projects to share with the community.\nHere a a few listed below:\n\n### Projects Using Fluvio\n- [Swiftide Project](https://github.com/bosun-ai/swiftide): a Rust native library for building LLM applications\n- [Real Time Stock Charts](https://github.com/KeptCodes/stock-charts): See how Fluvio is used to update real time stock charts\n\n### Community Connectors\n- [Qdrant Connector](https://qdrant.tech/documentation/data-management/fluvio/)\n- [Google Sheets Connector](https://github.com/fluvio-connectors/sheets-connector): Send data from Fluvio to Google Sheets\n- [Elastic Connector](https://github.com/fluvio-connectors/elastic-connector): Send data from Fluvio to Elastic Search\n\n## Community Development Resources\n\nMore projects and utilities are available in the  [Fluvio Community Github Org](https://github.com/fluvio-community/)\n\n- [Hello World Fluvio Connector](https://github.com/fluvio-community/connector-hello-source): Sample Fluvio connector template to build your own connector\n- [Gurubase](https://gurubase.io/g/fluvio): Third-party AI/LLM Docs query\n\n### Contributors are awesome\n\u003ca href=\"https://github.com/fluvio-community/fluvio/graphs/contributors\"\u003e\n  \u003cimg src=\"https://contrib.rocks/image?repo=fluvio-community/fluvio\" /\u003e\n\u003c/a\u003e\n\nMade with [contrib.rocks](https://contrib.rocks).\n\n## Community\n\nMany fluvio users and developers have made projects to share with the community.\nHere a a few listed below:\n\n### Projects Using Fluvio\n- [Real Time Stock Charts](https://github.com/KeptCodes/stock-charts): See how Fluvio is used to update real time stock charts\n- [Google Sheets Connector](https://github.com/fluvio-connectors/sheets-connector): Send data from Fluvio to Google Sheets\n- [Elastic Connector](https://github.com/fluvio-connectors/elastic-connector): Send data from Fluvio to Elastic Search\n- [Hello World Fluvio Connector](https://github.com/infinyon/connector-hello-source): Sample Fluvio connector template to build your own connector\n\n\n## License\n\nThis project is licensed under the [Apache license](LICENSE).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffluvio-community%2Ffluvio","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffluvio-community%2Ffluvio","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffluvio-community%2Ffluvio/lists"}