{"id":13458852,"url":"https://github.com/flyway/flyway","last_synced_at":"2026-04-27T12:01:23.511Z","repository":{"id":5949174,"uuid":"7170058","full_name":"flyway/flyway","owner":"flyway","description":"Flyway by Redgate • Database Migrations Made Easy.","archived":false,"fork":false,"pushed_at":"2026-04-14T09:50:15.000Z","size":1482979,"stargazers_count":9691,"open_issues_count":238,"forks_count":1604,"subscribers_count":172,"default_branch":"main","last_synced_at":"2026-04-17T11:47:38.989Z","etag":null,"topics":["aurora","continuous-delivery","continuous-deployment","database","database-administration","database-deployment","database-management","database-migrations","db2","devops","flyway","java","java-library","mariadb","mysql","postgresql","redgate","sql","sqlserver"],"latest_commit_sha":null,"homepage":"https://flywaydb.org","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/flyway.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2012-12-14T18:43:22.000Z","updated_at":"2026-04-16T18:28:57.000Z","dependencies_parsed_at":"2023-01-13T15:30:50.183Z","dependency_job_id":"d77fa9b8-9892-47b7-80d6-036296aac105","html_url":"https://github.com/flyway/flyway","commit_stats":{"total_commits":2921,"total_committers":180,"mean_commits":"16.227777777777778","dds":0.6610749743238618,"last_synced_commit":"2cd387f8c85a6986aead7012e41e365a8b276ab2"},"previous_names":[],"tags_count":294,"template":false,"template_full_name":null,"purl":"pkg:github/flyway/flyway","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyway%2Fflyway","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyway%2Fflyway/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyway%2Fflyway/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyway%2Fflyway/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/flyway","download_url":"https://codeload.github.com/flyway/flyway/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flyway%2Fflyway/sbom","scorecard":{"id":405299,"data":{"date":"2025-08-11","repo":{"name":"github.com/flyway/flyway","commit":"a2e102656bd66590510f2c79dbb01e3c25088135"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-pr.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-release.yml:22","Warn: no topLevel permission defined: .github/workflows/build-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/build-release.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/jekyll-gh-pages.yml:14","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: .mvn/wrapper/maven-wrapper.jar:1","Warn: binary detected: flyway-commandline/src/main/assembly/drivers/aws/aws-secretsmanager-jdbc-2.0.2-shaded.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact flyway-11.11.1 not signed: https://api.github.com/repos/flyway/flyway/releases/239957687","Warn: release artifact flyway-11.11.0 not signed: https://api.github.com/repos/flyway/flyway/releases/238542368","Warn: release artifact flyway-11.10.5 not signed: https://api.github.com/repos/flyway/flyway/releases/236588400","Warn: release artifact flyway-11.10.4 not signed: https://api.github.com/repos/flyway/flyway/releases/234863820","Warn: release artifact flyway-11.10.3 not signed: https://api.github.com/repos/flyway/flyway/releases/233187721","Warn: release artifact flyway-11.11.1 does not have provenance: https://api.github.com/repos/flyway/flyway/releases/239957687","Warn: release artifact flyway-11.11.0 does not have provenance: https://api.github.com/repos/flyway/flyway/releases/238542368","Warn: release artifact flyway-11.10.5 does not have provenance: https://api.github.com/repos/flyway/flyway/releases/236588400","Warn: release artifact flyway-11.10.4 does not have provenance: https://api.github.com/repos/flyway/flyway/releases/234863820","Warn: release artifact flyway-11.10.3 does not have provenance: https://api.github.com/repos/flyway/flyway/releases/233187721"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 2 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-pr.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/build-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-pr.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/build-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/build-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/build-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jekyll-gh-pages.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/jekyll-gh-pages.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jekyll-gh-pages.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/jekyll-gh-pages.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jekyll-gh-pages.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/jekyll-gh-pages.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jekyll-gh-pages.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/jekyll-gh-pages.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jekyll-gh-pages.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/flyway/flyway/jekyll-gh-pages.yml/main?enable=pin","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/Dockerfile:3","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/Dockerfile:17","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/Dockerfile:31","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/Dockerfile:41","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/alpine/Dockerfile:3","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/alpine/Dockerfile:18","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/alpine/Dockerfile:34","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/alpine/Dockerfile:43","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/azure/Dockerfile:3","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/azure/Dockerfile:20","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/azure/Dockerfile:38","Warn: containerImage not pinned by hash: flyway-docker/dockerfiles/azure/Dockerfile:47","Warn: pipCommand not pinned by hash: flyway-docker/dockerfiles/Dockerfile:36-39","Warn: pipCommand not pinned by hash: flyway-docker/dockerfiles/alpine/Dockerfile:39-41","Warn: npmCommand not pinned by hash: flyway-docker/dockerfiles/alpine/Dockerfile:46","Warn: npmCommand not pinned by hash: flyway-docker/dockerfiles/alpine/Dockerfile:47","Warn: pipCommand not pinned by hash: flyway-docker/dockerfiles/azure/Dockerfile:43-45","Warn: npmCommand not pinned by hash: flyway-docker/dockerfiles/azure/Dockerfile:49","Warn: npmCommand not pinned by hash: flyway-docker/dockerfiles/azure/Dockerfile:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned","Info:   0 out of   4 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T21:04:50.024Z","repository_id":5949174,"created_at":"2025-08-18T21:04:50.024Z","updated_at":"2025-08-18T21:04:50.024Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31947845,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-17T17:29:20.459Z","status":"ssl_error","status_checked_at":"2026-04-17T17:28:47.801Z","response_time":62,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aurora","continuous-delivery","continuous-deployment","database","database-administration","database-deployment","database-management","database-migrations","db2","devops","flyway","java","java-library","mariadb","mysql","postgresql","redgate","sql","sqlserver"],"created_at":"2024-07-31T09:00:58.463Z","updated_at":"2026-04-27T12:01:23.505Z","avatar_url":"https://github.com/flyway.png","language":"Java","funding_links":[],"categories":["Java","Java (78)","数据库、分布存储相关","其他__大数据","Schema","II. Databases, search engines, big data and machine learning","Development"],"sub_categories":["网络服务_其他","Changes","4. Client and drivers for databases"],"readme":"# [Flyway](https://github.com/flyway/flyway) by [Redgate](https://www.red-gate.com/) [![Build Release Tags](https://github.com/flyway/flyway/actions/workflows/build-release.yml/badge.svg)](https://github.com/flyway/flyway/actions/workflows/build-release.yml) [![Maven Central](https://img.shields.io/maven-central/v/org.flywaydb/flyway-core?logo=apachemaven\u0026logoColor=red)](https://search.maven.org/artifact/org.flywaydb/flyway-core) [![GitHub license](https://img.shields.io/badge/license-Apache%20License%202.0-blue.svg?style=flat)](http://www.apache.org/licenses/LICENSE-2.0)\n\n### Database Migrations Made Easy.\n\n![Flyway](https://documentation.red-gate.com/download/attachments/138346876/FD?version=3\u0026modificationDate=1633982869952\u0026api=v2 \"Flyway\")\n\n\n#### Evolve your database schema easily and reliably across all your instances.\nSimple, focused and powerful.\n\n#### Works on\nWindows, macOS, Linux, Docker and Java\n\n#### Supported build tools\nMaven and Gradle\n\n#### Supported databases\n\nSupports 50+ DBMS, including: Oracle, SQL Server, MySQL, PostgreSQL, \nMariaDB, MongoDB, Snowflake, Google BigQuery, Amazon Redshift, Azure Synapse, \nSAP HANA (including SAP HANA Cloud), SQLite, IBM DB2 LUW, Amazon Aurora MySQL, Amazon Aurora PostgreSQL, \nGoogle Cloud Spanner, SingleStoreDB, CockroachDB, TimescaleDB, Babelfish, Cassandra, Couchbase, Fabric data warehouse, Fabric database,\nPercona XtraDB Cluster and Sybase ASE.\n\nIncluding [Community DB Submissions](https://github.com/flyway/flyway-community-db-support): ClickHouse, Cubrid, Databricks, IBM DB2 z/OS, DuckDB, Ignite, Iris, \nOceanbase, QuestDB, TiDB, Timeplus, YugabyteDB\n\n#### Third party plugins\nSBT, Ant, Spring Boot, Grails, Play!, DropWizard, Grunt, Griffon, Ninja, ...\n\n## Documentation\n- [Getting started guides](https://documentation.red-gate.com/flyway/getting-started-with-flyway)\n- [Reference documentation](https://documentation.red-gate.com/flyway/reference)\n- [Contributing to the project](https://flyway.github.io/flyway/)\n\n## Download\n- Download Flyway OSS via [Flyway documentation pages](https://documentation.red-gate.com/flyway/reference/usage/flyway-open-source)\n- If you are looking for the [Redgate editions of Flyway](https://documentation.red-gate.com/flyway/reference/usage/command-line), you can find out more and download free trials from the Redgate website.\n\n### More information about Redgate Flyway\nRedgate also develops and maintains editions of Flyway that come with a GUI and additional capabilities if you are looking for more than an open source CLI edition of Flyway.\n_Please note that these editions are not part of the Flyway open source project._\n\n- Redgate [Flyway Community](https://www.red-gate.com/products/flyway/community/) - free database migrations tool maintained by Redgate. Built for individual developers looking for a simple and reliable migrations framework that gives the essentials to manage database changes.\n\n- Redgate [Flyway Enterprise](https://www.red-gate.com/products/flyway/enterprise/) - enterprise-grade database change management solution maintained by Redgate. Designed for enterprises needing a secure and scalable way to manage complex database changes. Built on Redgate’s best-in-class database comparison technology.\n## About\nFlyway is brought to you by [Redgate](https://www.red-gate.com/) with the help of many contributors.\n\n- [Posts on changes and updates to Flyway](https://documentation.red-gate.com/fd/flyway-blog-205226034.html)\n- [Release notes](https://documentation.red-gate.com/fd/release-notes-for-flyway-engine-179732572.html)\n\n## How to contribute\nPlease visit our [contribution page](https://flyway.github.io/flyway/) to find out how you can contribute in various ways to the project.\n\n## License\nCopyright © [Red Gate Software Ltd](http://www.red-gate.com) 2010-2026\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\nhttp://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n\n## Trademark\nFlyway is a registered trademark of Boxfuse GmbH, owned by  [Red Gate Software Ltd](https://www.red-gate.com/).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflyway%2Fflyway","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fflyway%2Fflyway","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflyway%2Fflyway/lists"}