{"id":13452576,"url":"https://github.com/garden-io/garden","last_synced_at":"2026-10-08T11:52:29.619Z","repository":{"id":37334035,"uuid":"112892985","full_name":"garden-io/garden","owner":"garden-io","description":"Automation for Kubernetes development and testing. Spin up production-like environments for development, testing, and CI on demand. Use the same configuration and workflows at every step of the process. Speed up your builds and test runs via shared result caching","archived":false,"fork":false,"pushed_at":"2026-08-24T10:16:21.000Z","size":172896,"stargazers_count":3617,"open_issues_count":247,"forks_count":296,"subscribers_count":34,"default_branch":"main","last_synced_at":"2026-10-04T10:55:21.322Z","etag":null,"topics":["containers","developer-tools","kubernetes","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://garden.io","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/garden-io.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"support/.dockerignore","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-12-03T02:10:59.000Z","updated_at":"2026-09-22T07:58:06.000Z","dependencies_parsed_at":"2023-09-22T12:56:35.045Z","dependency_job_id":"58c22a15-3325-48bc-b210-ba39ca5ba8ed","html_url":"https://github.com/garden-io/garden","commit_stats":{"total_commits":3275,"total_committers":116,"mean_commits":"28.232758620689655","dds":0.5948091603053436,"last_synced_commit":"e76927c169830a1ebc0839b914cdb851d4c6502e"},"previous_names":[],"tags_count":366,"template":false,"template_full_name":null,"purl":"pkg:github/garden-io/garden","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/garden-io%2Fgarden","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/garden-io%2Fgarden/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/garden-io%2Fgarden/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/garden-io%2Fgarden/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/garden-io","download_url":"https://codeload.github.com/garden-io/garden/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/garden-io%2Fgarden/sbom","scorecard":{"id":403565,"data":{"date":"2025-08-18T11:52:28Z","repo":{"name":"github.com/garden-io/garden","commit":"49b96ab74f37121a249285fdde4f4cc8a844f33e"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":5.9,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecards.yml:23","Info: jobLevel 'actions' permission set to 'read': .github/workflows/scorecards.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/actionlint.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/manually-create-homebrew-pr.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish-release.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/reusable-create-homebrew-pr.yml:20","Info: topLevel permissions set to 'read-all': .github/workflows/scorecards.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-create-homebrew-pr.yml:9","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1","Info: detected update tool: RenovateBot: renovate.json:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":3,"reason":"binaries present in source code","details":["Warn: binary detected: core/lib/fsevents/fsevents.node:1","Warn: binary detected: core/test/data/test-projects/container/missing-sh/foo:1","Warn: binary detected: e2e/projects/jib-container-modules/helloworld/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: e2e/projects/jib-container-modules/spring-boot/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: examples/jib-container/helloworld/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: examples/jib-container/spring-boot/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: plugins/jib/test/test-project/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact edge-cedar not signed: https://api.github.com/repos/garden-io/garden/releases/204975256","Warn: release artifact edge-bonsai not signed: https://api.github.com/repos/garden-io/garden/releases/91020029","Warn: release artifact 0.14.7 not signed: https://api.github.com/repos/garden-io/garden/releases/239685731","Warn: release artifact 0.13.62 not signed: https://api.github.com/repos/garden-io/garden/releases/239701413","Warn: release artifact 0.14.6 not signed: https://api.github.com/repos/garden-io/garden/releases/236353449","Warn: release artifact edge-cedar does not have provenance: https://api.github.com/repos/garden-io/garden/releases/204975256","Warn: release artifact edge-bonsai does not have provenance: https://api.github.com/repos/garden-io/garden/releases/91020029","Warn: release artifact 0.14.7 does not have provenance: https://api.github.com/repos/garden-io/garden/releases/239685731","Warn: release artifact 0.13.62 does not have provenance: https://api.github.com/repos/garden-io/garden/releases/239701413","Warn: release artifact 0.14.6 does not have provenance: https://api.github.com/repos/garden-io/garden/releases/236353449"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: core/test/data/hadolint/errAndWarn.Dockerfile:1: pin your Docker image by updating busybox:latest to busybox:latest@sha256:ab33eacc8251e3807b85bb6dba570e4698c3998eca6f0fc2ccb60575a563ea74","Warn: containerImage not pinned by hash: core/test/data/hadolint/ignore-dl3007/errAndWarn.Dockerfile:1: pin your Docker image by updating busybox:latest to busybox:latest@sha256:ab33eacc8251e3807b85bb6dba570e4698c3998eca6f0fc2ccb60575a563ea74","Warn: containerImage not pinned by hash: core/test/data/hadolint/warn.Dockerfile:1: pin your Docker image by updating busybox:latest to busybox:latest@sha256:ab33eacc8251e3807b85bb6dba570e4698c3998eca6f0fc2ccb60575a563ea74","Warn: containerImage not pinned by hash: core/test/data/openshift/demo-project/hello/Dockerfile:1: pin your Docker image by updating registry.access.redhat.com/ubi8/nginx-122 to registry.access.redhat.com/ubi8/nginx-122@sha256:9f70f85a5ef6dcbe3a7c62c95e5a55ffc44d0e092d9999fbbfd337ff15600f78","Warn: containerImage not pinned by hash: core/test/data/test-project-container-build-logs/module-a/Dockerfile:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:849d9d34d5fe0bf88b5fb3d09eb9684909ac4210488b52f4f7bbe683eedcb851","Warn: containerImage not pinned by hash: core/test/data/test-projects/1067-module-ref-within-file/Dockerfile:1: pin your Docker image by updating busybox to busybox@sha256:ab33eacc8251e3807b85bb6dba570e4698c3998eca6f0fc2ccb60575a563ea74","Warn: containerImage not pinned by hash: core/test/data/test-projects/container/dev-mode/Dockerfile:1: pin your Docker image by updating busybox:1.31.1 to busybox:1.31.1@sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209","Warn: containerImage not pinned by hash: core/test/data/test-projects/container/inaccessible-base/Dockerfile:1","Warn: containerImage not pinned by hash: core/test/data/test-projects/container/missing-tar/Dockerfile:1: pin your Docker image by updating busybox:1.31.1 to busybox:1.31.1@sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209","Warn: containerImage not pinned by hash: core/test/data/test-projects/container/private-base/Dockerfile:1","Warn: containerImage not pinned by hash: core/test/data/test-projects/container/remote-registry-test/Dockerfile:1: pin your Docker image by updating busybox:1.31.1 to busybox:1.31.1@sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209","Warn: containerImage not pinned by hash: core/test/data/test-projects/container/simple-service/Dockerfile:1: pin your Docker image by updating busybox:1.31.1 to busybox:1.31.1@sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209","Warn: containerImage not pinned by hash: core/test/data/test-projects/helm/api-image/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: core/test/data/test-projects/kubernetes-type/api-image/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: core/test/data/test-projects/merge-in-module-template/Dockerfile:1: pin your Docker image by updating nginxdemos/hello to nginxdemos/hello@sha256:b28d1e16c676896aaa98ed9c36d406cc4f4289558487f15e37e04354720f807a","Warn: containerImage not pinned by hash: core/test/data/test-projects/template-configs/Dockerfile:1: pin your Docker image by updating busybox:1.36.0 to busybox:1.36.0@sha256:9e2bbca079387d7965c3a9cee6d0c53f4f4e63ff7637877a83c4c05f2a666112","Warn: containerImage not pinned by hash: e2e/projects/code-synchronization-modules/node-service/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: e2e/projects/demo-project-modules/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: e2e/projects/demo-project-modules/frontend/Dockerfile:1: pin your Docker image by updating node:12.22.6-alpine to node:12.22.6-alpine@sha256:1ea5900145028957ec0e7b7e590ac677797fa8962ccec4e73188092f7bc14da5","Warn: containerImage not pinned by hash: e2e/projects/open-telemetry/otlp-server/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: e2e/projects/tasks-modules/hello/Dockerfile:1: pin your Docker image by updating node:12.22.6-alpine to node:12.22.6-alpine@sha256:1ea5900145028957ec0e7b7e590ac677797fa8962ccec4e73188092f7bc14da5","Warn: containerImage not pinned by hash: e2e/projects/tasks-modules/user/Dockerfile:1: pin your Docker image by updating ruby:2.5 to ruby:2.5@sha256:ecc3e4f5da13d881a415c9692bb52d2b85b090f38f4ad99ae94f932b3598444b","Warn: containerImage not pinned by hash: e2e/projects/templated-k8s-container-modules/module/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: e2e/projects/vote-helm-modules/api-image/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: e2e/projects/vote-helm-modules/result-image/Dockerfile:1: pin your Docker image by updating node:12.22.6-alpine to node:12.22.6-alpine@sha256:1ea5900145028957ec0e7b7e590ac677797fa8962ccec4e73188092f7bc14da5","Warn: containerImage not pinned by hash: e2e/projects/vote-helm-modules/vote-image/Dockerfile:1: pin your Docker image by updating node:16.18.1-alpine to node:16.18.1-alpine@sha256:b66869a9dc6bfeed416395c2a2f717bd1779af1cef828fe7941af3a8d0837fdc","Warn: containerImage not pinned by hash: e2e/projects/vote-helm-modules/worker-image/Dockerfile:1","Warn: containerImage not pinned by hash: e2e/projects/vote-helm-modules/worker-image/Dockerfile:13: pin your Docker image by updating openjdk:8-jre-alpine to openjdk:8-jre-alpine@sha256:f362b165b870ef129cbe730f29065ff37399c0aa8bcab3e44b51c302938c9193","Warn: containerImage not pinned by hash: e2e/projects/vote-modules/api/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: e2e/projects/vote-modules/result/Dockerfile:1: pin your Docker image by updating node:12.22.6-alpine to node:12.22.6-alpine@sha256:1ea5900145028957ec0e7b7e590ac677797fa8962ccec4e73188092f7bc14da5","Warn: containerImage not pinned by hash: e2e/projects/vote-modules/vote/Dockerfile:1: pin your Docker image by updating node:16.18.1-alpine to node:16.18.1-alpine@sha256:b66869a9dc6bfeed416395c2a2f717bd1779af1cef828fe7941af3a8d0837fdc","Warn: containerImage not pinned by hash: e2e/projects/vote-modules/worker/Dockerfile:1","Warn: containerImage not pinned by hash: e2e/projects/vote-modules/worker/Dockerfile:13: pin your Docker image by updating openjdk:8-jre-alpine to openjdk:8-jre-alpine@sha256:f362b165b870ef129cbe730f29065ff37399c0aa8bcab3e44b51c302938c9193","Warn: containerImage not pinned by hash: examples/argocd/api/Dockerfile:2: pin your Docker image by updating python:3.9-alpine to python:3.9-alpine@sha256:372f3cfc1738ed91b64c7d36a7a02d5c3468ec1f60c906872c3fd346dda8cbbb","Warn: containerImage not pinned by hash: examples/argocd/web/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28","Warn: containerImage not pinned by hash: examples/base-image/backend/Dockerfile.dev:2","Warn: containerImage not pinned by hash: examples/base-image/backend/Dockerfile.prod:2","Warn: containerImage not pinned by hash: examples/base-image/base-image/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/build-dependencies/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/build-dependencies/frontend/Dockerfile:1: pin your Docker image by updating node:18-alpine to node:18-alpine@sha256:8d6421d663b4c28fd3ebc498332f249011d118945588d0a35cb9bc4b8ca09d9e","Warn: containerImage not pinned by hash: examples/cert-manager-ext-dns/frontend/Dockerfile:1: pin your Docker image by updating node:14-alpine to node:14-alpine@sha256:434215b487a329c9e867202ff89e704d3a75e554822e07f3e0c0f9e606121b33","Warn: containerImage not pinned by hash: examples/code-synchronization/node-service/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/demo-project-start/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/demo-project-start/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/demo-project/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/demo-project/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/disabled-configs/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/disabled-configs/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/gatsby-code-sync/Dockerfile:1: pin your Docker image by updating node:18-alpine to node:18-alpine@sha256:8d6421d663b4c28fd3ebc498332f249011d118945588d0a35cb9bc4b8ca09d9e","Warn: containerImage not pinned by hash: examples/gke/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/gke/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/k8s-deploy-config-templates/api/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: examples/k8s-deploy-config-templates/web/Dockerfile:1: pin your Docker image by updating node:16.18.1-alpine to node:16.18.1-alpine@sha256:b66869a9dc6bfeed416395c2a2f717bd1779af1cef828fe7941af3a8d0837fdc","Warn: containerImage not pinned by hash: examples/k8s-deploy-patch-resources/api/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: examples/k8s-deploy-patch-resources/web/Dockerfile:1: pin your Docker image by updating node:16.18.1-alpine to node:16.18.1-alpine@sha256:b66869a9dc6bfeed416395c2a2f717bd1779af1cef828fe7941af3a8d0837fdc","Warn: containerImage not pinned by hash: examples/k8s-deploy-shared-manifests/api/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: examples/k8s-deploy-shared-manifests/web/Dockerfile:1: pin your Docker image by updating node:16.18.1-alpine to node:16.18.1-alpine@sha256:b66869a9dc6bfeed416395c2a2f717bd1779af1cef828fe7941af3a8d0837fdc","Warn: containerImage not pinned by hash: examples/kaniko/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/kaniko/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/local-exec/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/local-service/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/local-service/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/local-tls/services/go-service/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/local-tls/services/node-service/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/modules-to-actions/node-service/Dockerfile-a:1: pin your Docker image by updating node:18-alpine to node:18-alpine@sha256:8d6421d663b4c28fd3ebc498332f249011d118945588d0a35cb9bc4b8ca09d9e","Warn: containerImage not pinned by hash: examples/modules-to-actions/node-service/Dockerfile-b:1: pin your Docker image by updating node:18-alpine to node:18-alpine@sha256:8d6421d663b4c28fd3ebc498332f249011d118945588d0a35cb9bc4b8ca09d9e","Warn: containerImage not pinned by hash: examples/remote-k8s/services/go-service/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/remote-k8s/services/node-service/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/run-actions/hello/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/run-actions/user/Dockerfile:1: pin your Docker image by updating ruby:3 to ruby:3@sha256:8b541f8279f3e960c74ff31fb8fd523c59d82725c9fb921d504e9078d553c862","Warn: containerImage not pinned by hash: examples/rust/backend/dev.Dockerfile:2","Warn: containerImage not pinned by hash: examples/rust/backend/dev.Dockerfile:9","Warn: containerImage not pinned by hash: examples/rust/backend/dev.Dockerfile:13","Warn: containerImage not pinned by hash: examples/rust/backend/release.Dockerfile:2","Warn: containerImage not pinned by hash: examples/rust/backend/release.Dockerfile:5","Warn: containerImage not pinned by hash: examples/rust/backend/release.Dockerfile:9","Warn: containerImage not pinned by hash: examples/rust/backend/release.Dockerfile:18","Warn: containerImage not pinned by hash: examples/templated-k8s-container/service/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/terraform-gke/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/terraform-gke/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/variables/backend/Dockerfile:1: pin your Docker image by updating golang:1.18.3-alpine3.16 to golang:1.18.3-alpine3.16@sha256:7cc62574fcf9c5fb87ad42a9789d5539a6a085971d58ee75dd2ee146cb8a8695","Warn: containerImage not pinned by hash: examples/variables/frontend/Dockerfile:1: pin your Docker image by updating node:18.16.0-alpine to node:18.16.0-alpine@sha256:9036ddb8252ba7089c2c83eb2b0dcaf74ff1069e8ddf86fe2bd6dc5fecc9492d","Warn: containerImage not pinned by hash: examples/vote-helm/api-image/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: examples/vote-helm/result-image/Dockerfile:1: pin your Docker image by updating node:12.22.6-alpine to node:12.22.6-alpine@sha256:1ea5900145028957ec0e7b7e590ac677797fa8962ccec4e73188092f7bc14da5","Warn: containerImage not pinned by hash: examples/vote-helm/vote-image/Dockerfile:1: pin your Docker image by updating node:16.18.1-alpine to node:16.18.1-alpine@sha256:b66869a9dc6bfeed416395c2a2f717bd1779af1cef828fe7941af3a8d0837fdc","Warn: containerImage not pinned by hash: examples/vote-helm/worker-image/Dockerfile:1","Warn: containerImage not pinned by hash: examples/vote-helm/worker-image/Dockerfile:13: pin your Docker image by updating openjdk:8-jre-alpine to openjdk:8-jre-alpine@sha256:f362b165b870ef129cbe730f29065ff37399c0aa8bcab3e44b51c302938c9193","Warn: containerImage not pinned by hash: examples/vote/api/Dockerfile:2: pin your Docker image by updating python:3.12-alpine3.19 to python:3.12-alpine3.19@sha256:017a82f185bf6f10e62156f3e89b7e694d56d613b5a3f4dbf1d28f1014a972ed","Warn: containerImage not pinned by hash: examples/vote/result/Dockerfile:1: pin your Docker image by updating node:12.22.6-alpine to node:12.22.6-alpine@sha256:1ea5900145028957ec0e7b7e590ac677797fa8962ccec4e73188092f7bc14da5","Warn: containerImage not pinned by hash: examples/vote/vote/Dockerfile:1: pin your Docker image by updating node:16.18.1-alpine to node:16.18.1-alpine@sha256:b66869a9dc6bfeed416395c2a2f717bd1779af1cef828fe7941af3a8d0837fdc","Warn: containerImage not pinned by hash: examples/vote/worker/Dockerfile:1","Warn: containerImage not pinned by hash: examples/vote/worker/Dockerfile:13: pin your Docker image by updating openjdk:8-jre-alpine to openjdk:8-jre-alpine@sha256:f362b165b870ef129cbe730f29065ff37399c0aa8bcab3e44b51c302938c9193","Warn: containerImage not pinned by hash: images/k8s-util/Dockerfile:2","Warn: containerImage not pinned by hash: support/alpine.Dockerfile:53","Warn: containerImage not pinned by hash: support/alpine.Dockerfile:95","Warn: containerImage not pinned by hash: support/alpine.Dockerfile:135","Warn: containerImage not pinned by hash: support/alpine.Dockerfile:145","Warn: containerImage not pinned by hash: support/alpine.Dockerfile:156","Warn: containerImage not pinned by hash: support/alpine.Dockerfile:166","Warn: containerImage not pinned by hash: support/alpine.Dockerfile:181","Warn: containerImage not pinned by hash: support/debian.Dockerfile:54","Warn: containerImage not pinned by hash: support/debian.Dockerfile:82","Warn: containerImage not pinned by hash: support/debian.Dockerfile:113","Warn: containerImage not pinned by hash: support/debian.Dockerfile:124","Warn: containerImage not pinned by hash: support/debian.Dockerfile:134","Warn: containerImage not pinned by hash: support/debian.Dockerfile:145","Warn: containerImage not pinned by hash: support/debian.Dockerfile:162","Warn: pipCommand not pinned by hash: core/test/data/test-projects/helm/api-image/Dockerfile:10","Warn: pipCommand not pinned by hash: core/test/data/test-projects/helm/api-image/Dockerfile:11","Warn: pipCommand not pinned by hash: core/test/data/test-projects/helm/api-image/Dockerfile:13","Warn: pipCommand not pinned by hash: core/test/data/test-projects/kubernetes-type/api-image/Dockerfile:10","Warn: pipCommand not pinned by hash: core/test/data/test-projects/kubernetes-type/api-image/Dockerfile:11","Warn: pipCommand not pinned by hash: core/test/data/test-projects/kubernetes-type/api-image/Dockerfile:13","Warn: npmCommand not pinned by hash: e2e/projects/code-synchronization-modules/node-service/Dockerfile:6","Warn: npmCommand not pinned by hash: e2e/projects/code-synchronization-modules/node-service/Dockerfile:11","Warn: npmCommand not pinned by hash: e2e/projects/demo-project-modules/frontend/Dockerfile:8","Warn: npmCommand not pinned by hash: e2e/projects/open-telemetry/otlp-server/Dockerfile:9","Warn: npmCommand not pinned by hash: e2e/projects/tasks-modules/hello/Dockerfile:8","Warn: npmCommand not pinned by hash: e2e/projects/tasks-modules/hello/Dockerfile:9","Warn: pipCommand not pinned by hash: e2e/projects/vote-helm-modules/api-image/Dockerfile:10","Warn: pipCommand not pinned by hash: e2e/projects/vote-helm-modules/api-image/Dockerfile:11","Warn: pipCommand not pinned by hash: e2e/projects/vote-helm-modules/api-image/Dockerfile:13","Warn: npmCommand not pinned by hash: e2e/projects/vote-helm-modules/result-image/Dockerfile:6","Warn: npmCommand not pinned by hash: e2e/projects/vote-helm-modules/result-image/Dockerfile:9-12","Warn: npmCommand not pinned by hash: e2e/projects/vote-helm-modules/vote-image/Dockerfile:7","Warn: pipCommand not pinned by hash: e2e/projects/vote-modules/api/Dockerfile:10","Warn: pipCommand not pinned by hash: e2e/projects/vote-modules/api/Dockerfile:11","Warn: pipCommand not pinned by hash: e2e/projects/vote-modules/api/Dockerfile:13","Warn: npmCommand not pinned by hash: e2e/projects/vote-modules/result/Dockerfile:6","Warn: npmCommand not pinned by hash: e2e/projects/vote-modules/result/Dockerfile:9-12","Warn: npmCommand not pinned by hash: e2e/projects/vote-modules/vote/Dockerfile:7","Warn: pipCommand not pinned by hash: examples/argocd/api/Dockerfile:11","Warn: npmCommand not pinned by hash: examples/argocd/web/Dockerfile:7","Warn: npmCommand not pinned by hash: examples/build-dependencies/frontend/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/cert-manager-ext-dns/frontend/Dockerfile:7","Warn: npmCommand not pinned by hash: examples/code-synchronization/node-service/Dockerfile:6","Warn: npmCommand not pinned by hash: examples/code-synchronization/node-service/Dockerfile:11","Warn: npmCommand not pinned by hash: examples/demo-project-start/frontend/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/demo-project/frontend/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/disabled-configs/frontend/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/gatsby-code-sync/Dockerfile:3","Warn: npmCommand not pinned by hash: examples/gatsby-code-sync/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/gke/frontend/Dockerfile:8","Warn: pipCommand not pinned by hash: examples/k8s-deploy-config-templates/api/Dockerfile:12","Warn: pipCommand not pinned by hash: examples/k8s-deploy-config-templates/api/Dockerfile:13","Warn: pipCommand not pinned by hash: examples/k8s-deploy-config-templates/api/Dockerfile:15","Warn: npmCommand not pinned by hash: examples/k8s-deploy-config-templates/web/Dockerfile:7","Warn: pipCommand not pinned by hash: examples/k8s-deploy-patch-resources/api/Dockerfile:12","Warn: pipCommand not pinned by hash: examples/k8s-deploy-patch-resources/api/Dockerfile:13","Warn: pipCommand not pinned by hash: examples/k8s-deploy-patch-resources/api/Dockerfile:15","Warn: npmCommand not pinned by hash: examples/k8s-deploy-patch-resources/web/Dockerfile:7","Warn: pipCommand not pinned by hash: examples/k8s-deploy-shared-manifests/api/Dockerfile:12","Warn: pipCommand not pinned by hash: examples/k8s-deploy-shared-manifests/api/Dockerfile:13","Warn: pipCommand not pinned by hash: examples/k8s-deploy-shared-manifests/api/Dockerfile:15","Warn: npmCommand not pinned by hash: examples/k8s-deploy-shared-manifests/web/Dockerfile:7","Warn: npmCommand not pinned by hash: examples/kaniko/frontend/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/local-service/frontend/Dockerfile:6","Warn: npmCommand not pinned by hash: examples/local-tls/services/node-service/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/modules-to-actions/node-service/Dockerfile-a:10","Warn: npmCommand not pinned by hash: examples/modules-to-actions/node-service/Dockerfile-b:10","Warn: npmCommand not pinned by hash: examples/remote-k8s/services/node-service/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/run-actions/hello/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/run-actions/hello/Dockerfile:9","Warn: downloadThenRun not pinned by hash: examples/rust/backend/dev.Dockerfile:5","Warn: npmCommand not pinned by hash: examples/terraform-gke/frontend/Dockerfile:8","Warn: npmCommand not pinned by hash: examples/variables/frontend/Dockerfile:8","Warn: pipCommand not pinned by hash: examples/vote-helm/api-image/Dockerfile:10","Warn: pipCommand not pinned by hash: examples/vote-helm/api-image/Dockerfile:11","Warn: pipCommand not pinned by hash: examples/vote-helm/api-image/Dockerfile:13","Warn: npmCommand not pinned by hash: examples/vote-helm/result-image/Dockerfile:6","Warn: npmCommand not pinned by hash: examples/vote-helm/result-image/Dockerfile:9-12","Warn: npmCommand not pinned by hash: examples/vote-helm/vote-image/Dockerfile:7","Warn: pipCommand not pinned by hash: examples/vote/api/Dockerfile:10","Warn: pipCommand not pinned by hash: examples/vote/api/Dockerfile:11","Warn: pipCommand not pinned by hash: examples/vote/api/Dockerfile:13","Warn: npmCommand not pinned by hash: examples/vote/result/Dockerfile:6","Warn: npmCommand not pinned by hash: examples/vote/result/Dockerfile:9-12","Warn: npmCommand not pinned by hash: examples/vote/vote/Dockerfile:7","Warn: downloadThenRun not pinned by hash: images/circleci-runner/Dockerfile:51-57","Warn: pipCommand not pinned by hash: support/alpine.Dockerfile:127","Warn: downloadThenRun not pinned by hash: support/alpine.Dockerfile:127","Warn: npmCommand not pinned by hash: scripts/install-asdf-dependencies.sh:25","Warn: npmCommand not pinned by hash: scripts/install-asdf-dependencies.sh:28","Warn: downloadThenRun not pinned by hash: scripts/install-osx-dependencies.sh:18","Warn: npmCommand not pinned by hash: scripts/install-osx-dependencies.sh:29","Warn: npmCommand not pinned by hash: scripts/install-osx-dependencies.sh:32","Info:   6 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of  46 npmCommand dependencies pinned","Info:   0 out of   4 downloadThenRun dependencies pinned","Info:  17 out of 124 containerImage dependencies pinned","Info:   0 out of  29 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 25 contributing companies or organizations","details":["Info: found contributions from: 5one8, admoexperience, awesome-rust-cloud-native, beam-community, biohack-me, cactossystem, confluentinc, democracy deutschland @demokratie-live, demokratie-live, docker, garden-io, garden.io, hightouch, idris-community, jenkinsci, lego, mazehq, mutagen-io, ninetailed-inc, opallabs, shankyjs, siderolabs, swift-server-community, vapor, wachtlerlab"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"Vulnerabilities","score":0,"reason":"196 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-43qf-4rqw-9q2g","Warn: Project is vulnerable to: GHSA-7rxf-gvfg-47g4","Warn: Project is vulnerable to: GHSA-8vgw-p6qm-5gr7","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: PYSEC-2024-71 / GHSA-hxwh-jpp2-84pm","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg","Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-27xj-rqx5-2255","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-4w82-r329-3q67","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-58pp-9c76-5625","Warn: Project is vulnerable to: GHSA-5949-rw7g-wx7w","Warn: Project is vulnerable to: GHSA-5p34-5m6p-p58g","Warn: Project is vulnerable to: GHSA-5r5r-6hpj-8gg9","Warn: Project is vulnerable to: GHSA-6fpp-rgj9-8rwc","Warn: Project is vulnerable to: GHSA-758m-v56v-grj4","Warn: Project is vulnerable to: GHSA-85cw-hj65-qqv9","Warn: Project is vulnerable to: GHSA-89qr-369f-5m5x","Warn: Project is vulnerable to: GHSA-8c4j-34r4-xr8g","Warn: Project is vulnerable to: GHSA-8w26-6f25-cm9x","Warn: Project is vulnerable to: GHSA-95cm-88f5-f2c7","Warn: Project is vulnerable to: GHSA-9gph-22xh-8x98","Warn: Project is vulnerable to: GHSA-9m6f-7xcq-8vf8","Warn: Project is vulnerable to: GHSA-9vvp-fxw6-jcxr","Warn: Project is vulnerable to: GHSA-c265-37vj-cwcc","Warn: Project is vulnerable to: GHSA-c2q3-4qrh-fm48","Warn: Project is vulnerable to: GHSA-cf6r-3wgc-h863","Warn: Project is vulnerable to: GHSA-cmfg-87vq-g5g4","Warn: Project is vulnerable to: GHSA-cvm9-fjm9-3572","Warn: Project is vulnerable to: GHSA-f3j5-rmmp-3fc5","Warn: Project is vulnerable to: GHSA-f9xh-2qgp-cq57","Warn: Project is vulnerable to: GHSA-fmmc-742q-jg75","Warn: Project is vulnerable to: GHSA-fqwf-pjwf-7vqv","Warn: Project is vulnerable to: GHSA-gjmw-vf9h-g25v","Warn: Project is vulnerable to: GHSA-gwp4-hfv6-p7hw","Warn: Project is vulnerable to: GHSA-gww7-p5w4-wrfv","Warn: Project is vulnerable to: GHSA-h3cw-g4mq-c5x2","Warn: Project is vulnerable to: GHSA-h4rc-386g-6m85","Warn: Project is vulnerable to: GHSA-h822-r4r5-v8jg","Warn: Project is vulnerable to: GHSA-j823-4qch-3rgm","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-m6x4-97wx-4q27","Warn: Project is vulnerable to: GHSA-mc6h-4qgp-37qh","Warn: Project is vulnerable to: GHSA-mph4-vhrx-mv67","Warn: Project is vulnerable to: GHSA-mx7p-6679-8g3q","Warn: Project is vulnerable to: GHSA-p43x-xfjf-5jhr","Warn: Project is vulnerable to: GHSA-q93h-jc49-78gg","Warn: Project is vulnerable to: GHSA-qjw2-hr98-qgfh","Warn: Project is vulnerable to: GHSA-qmqc-x3r4-6v39","Warn: Project is vulnerable to: GHSA-r3gr-cxrf-hg25","Warn: Project is vulnerable to: GHSA-r695-7vr9-jgc2","Warn: Project is vulnerable to: GHSA-rf6r-2c4q-2vwg","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-rpr3-cw39-3pxh","Warn: Project is vulnerable to: GHSA-v3xw-c963-f5hc","Warn: Project is vulnerable to: GHSA-v585-23hc-c647","Warn: Project is vulnerable to: GHSA-vfqx-33qm-g869","Warn: Project is vulnerable to: GHSA-wh8g-3j2c-rqj5","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-hh3j-x4mc-g48r","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-m8p2-495h-ccmh","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-h452-7996-h45h","Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c","Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc","Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-434g-2637-qmqr","Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m","Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw","Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p","Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747","Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6","Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5","Warn: Project is vulnerable to: GHSA-5j4c-8p2g-v4jx","Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx","Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: PYSEC-2018-66 / GHSA-562c-5r94-xh97","Warn: Project is vulnerable to: PYSEC-2019-179 / GHSA-5wv5-4vpf-pj6m","Warn: Project is vulnerable to: PYSEC-2023-62 / GHSA-m2qf-hxjv-5gpq","Warn: Project is vulnerable to: GHSA-84pr-m4jr-85g5","Warn: Project is vulnerable to: PYSEC-2020-43 / GHSA-xc3p-ff3m-f46v","Warn: Project is vulnerable to: PYSEC-2018-55 / GHSA-32pc-xphx-q4f6","Warn: Project is vulnerable to: GHSA-hc5x-x2vx-497g","Warn: Project is vulnerable to: GHSA-w3h3-4rj7-4ph4","Warn: Project is vulnerable to: PYSEC-2014-14 / GHSA-652x-xj99-gmcc","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2014-13 / GHSA-cfj3-7x9c-4p3h","Warn: Project is vulnerable to: PYSEC-2018-28 / GHSA-x84v-xcm2-53pg","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-44fp-w29j-9vj5","Warn: Project is vulnerable to: GHSA-4pg4-qvpc-4q3h","Warn: Project is vulnerable to: GHSA-g5hg-p3ph-g8qg","Warn: Project is vulnerable to: GHSA-fjgf-rc76-4x9p","Warn: Project is vulnerable to: GHSA-f9xv-q969-pqx4","Warn: Project is vulnerable to: GHSA-6chw-6frg-f759","Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw","Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj","Warn: Project is vulnerable to: GHSA-6c8f-qphg-qjgp","Warn: Project is vulnerable to: GHSA-h9rv-jmmf-4pgx","Warn: Project is vulnerable to: GHSA-hxcc-f52p-wc94","Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq","Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc","Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-rr8g-9fpq-6wmg","Warn: Project is vulnerable to: RUSTSEC-2025-0023"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T20:39:09.786Z","repository_id":37334035,"created_at":"2025-08-18T20:39:09.787Z","updated_at":"2025-08-18T20:39:09.787Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38114877,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-08T02:00:05.744Z","response_time":97,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["containers","developer-tools","kubernetes","testing","testing-tools"],"created_at":"2024-07-31T07:01:27.970Z","updated_at":"2026-10-08T11:52:29.612Z","avatar_url":"https://github.com/garden-io.png","language":"TypeScript","funding_links":[],"categories":["TypeScript","Internal developer platform","Tools and Libraries","testing","developer-tools","Continuous Delivery \u0026 GitOps"],"sub_categories":["Infrastructure from code","Development Tools"],"readme":"# Garden\n\n_If you love Garden, please ★ star this repository to show your support :green_heart:. Looking for support? Check out [Garden Discussions](https://github.com/garden-io/garden/discussions)._\n\n\u003cp align=\"center\"\u003e\n  \u003cpicture\u003e\n    \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://github-production-user-asset-6210df.s3.amazonaws.com/658727/272340510-34957be5-7318-4473-8141-2751ca571c4f.png\"\u003e\n    \u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://github-production-user-asset-6210df.s3.amazonaws.com/658727/272340472-ad8d7a46-ef85-47ea-9129-d815206ed2f6.png\"\u003e\n    \u003cimg alt=\"Garden\" src=\"https://github-production-user-asset-6210df.s3.amazonaws.com/658727/272340472-ad8d7a46-ef85-47ea-9129-d815206ed2f6.png\"\u003e\n  \u003c/picture\u003e\n\u003c/p\u003e\n\u003cdiv align=\"center\"\u003e\n  \u003ca href=\"https://docs.garden.io/getting-started/quickstart/?utm_source=github\"\u003eQuickstart\u003c/a\u003e\n  \u003cspan\u003e\u0026nbsp;\u0026nbsp;•\u0026nbsp;\u0026nbsp;\u003c/span\u003e\n  \u003ca href=\"https://docs.garden.io/?utm_source=github\"\u003eDocs\u003c/a\u003e\n  \u003cspan\u003e\u0026nbsp;\u0026nbsp;•\u0026nbsp;\u0026nbsp;\u003c/span\u003e\n  \u003ca href=\"https://app.garden.io/?utm_source=github\"\u003eGarden Cloud\u003c/a\u003e\n  \u003cspan\u003e\u0026nbsp;\u0026nbsp;•\u0026nbsp;\u0026nbsp;\u003c/span\u003e\n  \u003ca href=\"https://github.com/garden-io/garden/tree/0.14.20/examples\"\u003eExamples\u003c/a\u003e\n\u003c/div\u003e\n\n## Welcome to Garden!\n\nGarden is a DevOps automation tool for developing and testing Kubernetes apps faster.\n\n- Spin up **production-like environments** for development, testing, and CI **on demand**\n- Use the **same configuration** and workflows for **every stage of software delivery**\n- **Speed up builds and test runs** via smart caching.\n\n## Getting Started\n\nThe fastest way to get started with Garden is by following our [quickstart guide](https://docs.garden.io/getting-started/quickstart).\n\n## Demo\n\n![Garden dev deploy](https://raw.githubusercontent.com/ShankyJS/garden-quickstart-content/d8095ad1a8615edf49e721b8afcd901f3056e127/dev-mode.gif)\n\n## Docs\n\nFor a thorough introduction to Garden and comprehensive documentation, visit our [docs](https://docs.garden.io).\n\n## Usage Overview\n\nGarden is configured via `garden.yml` files. For large projects you can split the files up and co-locate them with the relevant parts of your stack, even across multiple repositories.\n\nA (simplified) Garden configuration for a web app looks like this:\n\n```yaml\nkind: Deploy\nname: db\ntype: helm\nspec:\n  chart:\n    name: postgres\n    repo: https://charts.bitnami.com/bitnami\n---\nkind: Build\nname: api\ntype: container\nsource:\n  path: ./api\n---\nkind: Deploy\nname: api\ntype: kubernetes\ndependencies: [build.api, deploy.postgres]\nspec:\n  manifestFiles: [./manifests/api/**/*]\n---\nkind: Test\nname: integ\ntype: container\ndependencies: [deploy.api]\nspec:\n  args: [npm, run, test:integ]\n```\n\nYou can build and deploy this project with:\n\n```console\ngarden deploy\n```\n\n...and test it with:\n\n```console\ngarden test\n```\n\nTo create a preview environment on every pull request, you would add the following to your CI pipeline:\n\n```console\ngarden deploy --env preview\n```\n\nGarden also has a special mode called \"sync mode\" which live reloads changes to your running services—ensuring **blazing fast feedback while developing**. To enable it, run:\n\n```console\ngarden deploy --sync\n```\n\nYou can also start an interactive dev console (see screencap above) from which you can build, deploy, and test your project with:\n\n```console\ngarden dev\n```\n\n## How Garden Works\n\nGarden Core is a standalone binary that can run from CI or from a developer’s machine. Its configuration framework allows you to codify a complete description of your stack using intuitive YAML config—making your workflows reproducible and portable.\n\nGarden's \"action graph\" allows you to declare the dependency structure of your project and track changes to avoid unnecessary builds, deploys and test runs. It's like CI/CD config that you can additionally use for development.\n\nCheck out the [How Garden Works](https://docs.garden.io/overview/how-garden-works) page of our docs to learn more.\n\n## Plugins\n\nGarden is _pluggable_: how actions are executed depends on the plugins used. Our Kubernetes plugin is currently the most popular, followed by our Terraform and Pulumi plugins. For a more thorough introduction to Garden and its plugins, visit our docs:\n\n- [Kubernetes plugin](https://docs.garden.io/guides/remote-kubernetes)\n- [Terraform plugin](https://docs.garden.io/terraform-plugin/about)\n- [Pulumi plugin](https://docs.garden.io/pulumi-plugin/about)\n\n## Community\n\nCheck out [Garden Discussions](https://github.com/garden-io/garden/discussions) to ask questions, give feedback or just say hi 🙂\n\n## Contributing\n\nGarden accepts contributions! Please see our [contributing guide](CONTRIBUTING.md) for more information.\n\n## License\n\nGarden is licensed according to [Mozilla Public License 2.0 (MPL-2.0)](https://github.com/garden-io/garden/blob/main/LICENSE.md).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgarden-io%2Fgarden","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgarden-io%2Fgarden","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgarden-io%2Fgarden/lists"}