{"id":13647265,"url":"https://github.com/flyteorg/flytekit","last_synced_at":"2026-01-12T10:53:50.031Z","repository":{"id":36974808,"uuid":"203634431","full_name":"flyteorg/flytekit","owner":"flyteorg","description":"Extensible Python SDK for developing Flyte tasks and workflows. Simple to get started and learn and highly extensible. ","archived":false,"fork":false,"pushed_at":"2025-12-31T08:46:05.000Z","size":43461,"stargazers_count":300,"open_issues_count":153,"forks_count":332,"subscribers_count":234,"default_branch":"master","last_synced_at":"2026-01-04T12:36:38.168Z","etag":null,"topics":["automation","data","data-science","extensible","flyte","flyte-tasks","hacktoberfest","mlops","pypi","python","sdk","spark","workflows"],"latest_commit_sha":null,"homepage":"https://docs.flyte.org/en/latest/api/flytekit/docs_index.html","language":"Python","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/flyteorg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-08-21T17:38:38.000Z","updated_at":"2025-12-31T08:46:10.000Z","dependencies_parsed_at":"2024-01-29T10:47:39.789Z","dependency_job_id":"74f43b0b-13f2-4343-aeac-577d3fc63747","html_url":"https://github.com/flyteorg/flytekit","commit_stats":{"total_commits":2001,"total_committers":200,"mean_commits":10.005,"dds":0.8565717141429285,"last_synced_commit":"c95cc634359ebc793cccdf18a2872f2974ed8662"},"previous_names":[],"tags_count":467,"template":false,"template_full_name":null,"purl":"pkg:github/flyteorg/flytekit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyteorg%2Fflytekit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyteorg%2Fflytekit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyteorg%2Fflytekit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyteorg%2Fflytekit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/flyteorg","download_url":"https://codeload.github.com/flyteorg/flytekit/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyteorg%2Fflytekit/sbom","scorecard":{"id":405234,"data":{"date":"2025-08-11","repo":{"name":"github.com/flyteorg/flytekit","commit":"68f2c60065bea993cf642b7f1802b847d24a3358"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build_image.yml:1","Warn: no topLevel permission defined: .github/workflows/pythonbuild.yml:1","Warn: no topLevel permission defined: .github/workflows/pythonpublish.yml:1","Warn: no topLevel permission defined: .github/workflows/upgrade_automation.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_image.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_image.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_image.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_image.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/build_image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:256: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:401: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:405: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:438: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:445: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:447: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonbuild.yml:450: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonbuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:319: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:322: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:332: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:341: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:361: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:364: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:367: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:374: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:383: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:256: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:273: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:298: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/pythonpublish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/upgrade_automation.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/flyteorg/flytekit/upgrade_automation.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: containerImage not pinned by hash: Dockerfile.connector:1","Warn: containerImage not pinned by hash: Dockerfile.connector:26","Warn: containerImage not pinned by hash: Dockerfile.dev:9","Warn: containerImage not pinned by hash: plugins/flytekit-flyteinteractive/Dockerfile:1: pin your Docker image by updating python:3.10-slim-bookworm to python:3.10-slim-bookworm@sha256:66a6e8a211a02794515d4e1aa1970fc037ec4dde1429395e1321bdd63af01256","Warn: containerImage not pinned by hash: plugins/flytekit-openai/Dockerfile.batch:2","Warn: containerImage not pinned by hash: plugins/flytekit-spark/Dockerfile:2: pin your Docker image by updating apache/spark-py:v3.4.0 to apache/spark-py:v3.4.0@sha256:5f6a8d82dd2667cedcdeb10d3c899ce2b91bc4e1c1bfc0abbc903829291ced6b","Warn: containerImage not pinned by hash: plugins/flytekit-sqlalchemy/Dockerfile:2","Warn: containerImage not pinned by hash: tests/flytekit/unit/core/Dockerfile.raw_container:1: pin your Docker image by updating python:3.9-alpine to python:3.9-alpine@sha256:372f3cfc1738ed91b64c7d36a7a02d5c3468ec1f60c906872c3fd346dda8cbbb","Warn: pipCommand not pinned by hash: Dockerfile:23-34","Warn: pipCommand not pinned by hash: Dockerfile.connector:8-9","Warn: pipCommand not pinned by hash: Dockerfile.dev:30-31","Warn: pipCommand not pinned by hash: plugins/flytekit-flyteinteractive/Dockerfile:17-34","Warn: pipCommand not pinned by hash: plugins/flytekit-openai/Dockerfile.batch:11-13","Warn: pipCommand not pinned by hash: plugins/flytekit-spark/Dockerfile:12-13","Warn: pipCommand not pinned by hash: plugins/flytekit-sqlalchemy/Dockerfile:11-17","Warn: downloadThenRun not pinned by hash: plugins/flytekit-dolt/scripts/flytekit_install_dolt.sh:13","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:241","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:413","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:458","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:459","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:65","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:108","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:160","Warn: pipCommand not pinned by hash: .github/workflows/pythonbuild.yml:197","Warn: pipCommand not pinned by hash: .github/workflows/pythonpublish.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/pythonpublish.yml:21","Info:   0 out of  31 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  59 third-party GitHubAction dependencies pinned","Info:   0 out of   9 containerImage dependencies pinned","Info:   0 out of  17 pipCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pythonbuild.yml:209"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"52 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: GHSA-m5vv-6r4h-3vj9","Warn: Project is vulnerable to: GHSA-79v4-65xg-pq4g","Warn: Project is vulnerable to: GHSA-33p9-3p43-82vq","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: PYSEC-2024-161","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-7cx3-6m66-7c5m","Warn: Project is vulnerable to: GHSA-8w49-h785-mj3c","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: GHSA-27mf-ghqm-j3j8","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: GHSA-8863-4qmg-fr45","Warn: Project is vulnerable to: GHSA-99pm-ch96-ccp2","Warn: Project is vulnerable to: GHSA-fw5r-6m3x-rh7p","Warn: Project is vulnerable to: PYSEC-2025-15 / GHSA-p8q5-cvwx-wvwp","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: GHSA-h95x-26f3-88hr","Warn: Project is vulnerable to: GHSA-2g68-c3qc-8985","Warn: Project is vulnerable to: GHSA-f9vj-2wh5-fj8j","Warn: Project is vulnerable to: PYSEC-2023-221 / GHSA-hrfv-mqp8-q5rw","Warn: Project is vulnerable to: GHSA-q34m-jh98-gwm2","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: PYSEC-2024-60 / GHSA-jjg7-2v4v-x38h","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: GHSA-jfmj-5v4g-7637","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: PYSEC-2024-252 / GHSA-5pcm-hx3q-hm94","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-251 / GHSA-pg7h-5qx3-wjr3","Warn: Project is vulnerable to: PYSEC-2024-250","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: PYSEC-2024-4 / GHSA-2mqj-m65w-jghx","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: PYSEC-2023-238 / GHSA-5wvp-7f3h-6wmm","Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T21:03:40.178Z","repository_id":36974808,"created_at":"2025-08-18T21:03:40.178Z","updated_at":"2025-08-18T21:03:40.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28338850,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-12T10:40:25.642Z","status":"ssl_error","status_checked_at":"2026-01-12T10:39:27.820Z","response_time":98,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation","data","data-science","extensible","flyte","flyte-tasks","hacktoberfest","mlops","pypi","python","sdk","spark","workflows"],"created_at":"2024-08-02T01:03:26.868Z","updated_at":"2026-01-12T10:53:50.009Z","avatar_url":"https://github.com/flyteorg.png","language":"Python","readme":"\u003cp align=\"center\"\u003e\n    \u003cimg src=\"https://raw.githubusercontent.com/flyteorg/static-resources/main/common/flyte_circle_gradient_1_4x4.png\" alt=\"Flyte Logo\" width=\"100\"\u003e\n\u003c/p\u003e\n\u003ch1 align=\"center\"\u003e\n    Flytekit Python\n\u003c/h1\u003e\n\u003cp align=\"center\"\u003e\n    Flytekit Python is the Python SDK built on top of Flyte\n\u003c/p\u003e\n\u003ch3 align=\"center\"\u003e\n    \u003ca href=\"plugins/README.md\"\u003ePlugins\u003c/a\u003e\n    \u003cspan\u003e · \u003c/span\u003e\n    \u003ca href=\"https://docs.flyte.org/en/latest/api/flytekit/contributing.html\"\u003eContribution Guide\u003c/a\u003e\n\u003c/h3\u003e\n\n[![PyPI version fury.io](https://badge.fury.io/py/flytekit.svg)](https://pypi.python.org/pypi/flytekit/)\n[![PyPI download day](https://img.shields.io/pypi/dd/flytekit.svg)](https://pypi.python.org/pypi/flytekit/)\n[![PyPI download month](https://img.shields.io/pypi/dm/flytekit.svg)](https://pypi.python.org/pypi/flytekit/)\n[![PyPI total download](https://static.pepy.tech/badge/flytekit)](https://static.pepy.tech/badge/flytekit)\n[![PyPI format](https://img.shields.io/pypi/format/flytekit.svg)](https://pypi.python.org/pypi/flytekit/)\n[![PyPI implementation](https://img.shields.io/pypi/implementation/flytekit.svg)](https://pypi.python.org/pypi/flytekit/)\n[![Codecov](https://img.shields.io/codecov/c/github/flyteorg/flytekit?style=plastic)](https://app.codecov.io/gh/flyteorg/flytekit)\n[![PyPI pyversions](https://img.shields.io/pypi/pyversions/flytekit.svg)](https://pypi.python.org/pypi/flytekit/)\n[![Docs](https://readthedocs.org/projects/flytekit/badge/?version=latest\u0026style=plastic)](https://flytekit.rtfd.io)\n[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)\n[![Slack](https://img.shields.io/badge/slack-join_chat-white.svg?logo=slack\u0026style=social)](https://slack.flyte.org)\n\nFlytekit Python is the Python Library for easily authoring, testing, deploying, and interacting with Flyte tasks, workflows, and launch plans.\n\nIf you haven't explored Flyte yet, please refer to:\n - [Flyte homepage](https://flyte.org)\n - [Flyte core repository](https://github.com/flyteorg/flyte)\n\n## 🚀 Quick Start\n\nFlytekit is the core extensible library to author Flyte workflows and tasks and interact with Flyte backend services.\n\n### Installation\n\n```bash\npip install flytekit\n```\n\n### A Simple Example\n\n```python\nfrom flytekit import task, workflow\n\n@task(cache=True, cache_version=\"1\", retries=3)\ndef sum(x: int, y: int) -\u003e int:\n    return x + y\n\n@task(cache=True, cache_version=\"1\", retries=3)\ndef square(z: int) -\u003e int:\n    return z*z\n\n@workflow\ndef my_workflow(x: int, y: int) -\u003e int:\n    return sum(x=square(z=x), y=square(z=y))\n```\n\n## 📦 Resources\n- [Learn Flytekit by example](https://docs.flyte.org/en/latest/user_guide/quickstart_guide.html)\n- [Flytekit API documentation](https://docs.flyte.org/en/latest/api/flytekit/docs_index.html)\n\n\n## 📖 How to Contribute to Flytekit\nYou can find the detailed contribution guide [here](https://docs.flyte.org/en/latest/api/flytekit/contributing.html). Plugins' contribution guide is included as well.\n\n## Code Structure\nPlease see the [contributor's guide](https://docs.flyte.org/en/latest/api/flytekit/contributing.html) for a quick summary of how this code is structured.\n\n## 🐞 File an Issue\nRefer to the [issues](https://github.com/flyteorg/flyte/issues) section in the contribution guide if you'd like to file an issue.\n\n## 🔌 Flytekit Plugins\nRefer to [plugins/README.md](plugins/README.md) for a list of available plugins.\nThere may be plugins outside of this list, but the core maintainers maintain this list.\n","funding_links":[],"categories":["Python"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflyteorg%2Fflytekit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fflyteorg%2Fflytekit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflyteorg%2Fflytekit/lists"}