{"id":13441539,"url":"https://github.com/google/filament","last_synced_at":"2026-04-02T22:47:16.447Z","repository":{"id":37390680,"uuid":"143455116","full_name":"google/filament","owner":"google","description":"Filament is a real-time physically based rendering engine for Android, iOS, Windows, Linux, macOS, and WebGL2","archived":false,"fork":false,"pushed_at":"2026-02-03T21:51:20.000Z","size":1070837,"stargazers_count":19456,"open_issues_count":198,"forks_count":2100,"subscribers_count":384,"default_branch":"main","last_synced_at":"2026-02-03T21:59:49.972Z","etag":null,"topics":["3d-graphics","android","gltf","gltf-viewer","graphics","metal","opengl","opengl-es","pbr","real-time","vulkan","wasm","webgl"],"latest_commit_sha":null,"homepage":"https://google.github.io/filament/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-08-03T17:26:00.000Z","updated_at":"2026-02-03T21:32:38.000Z","dependencies_parsed_at":"2022-07-12T16:17:43.873Z","dependency_job_id":"80cd5a6e-2e3a-45fe-a0da-7fa257c2e328","html_url":"https://github.com/google/filament","commit_stats":{"total_commits":6680,"total_committers":169,"mean_commits":39.52662721893491,"dds":0.6711077844311377,"last_synced_commit":"29d2d819e345a124057d0af0c6727cc87fb56f6f"},"previous_names":[],"tags_count":258,"template":false,"template_full_name":null,"purl":"pkg:github/google/filament","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ffilament","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ffilament/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ffilament/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ffilament/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/filament/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ffilament/sbom","scorecard":{"id":114091,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/filament","commit":"d83a5903df036ed47c22c06b2832def77bca4210"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.3,"checks":[{"name":"Code-Review","score":7,"reason":"Found 16/21 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/android-continuous.yml:1","Warn: no topLevel permission defined: .github/workflows/cocopods-deploy.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-continuous.yml:1","Warn: no topLevel permission defined: .github/workflows/linux-continuous.yml:1","Warn: no topLevel permission defined: .github/workflows/mac-continuous.yml:1","Warn: no topLevel permission defined: .github/workflows/npm-deploy.yml:1","Warn: no topLevel permission defined: .github/workflows/postsubmit.yml:1","Warn: no topLevel permission defined: .github/workflows/presubmit.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:15","Warn: no topLevel permission defined: .github/workflows/verify-release-notes.yml:1","Warn: no topLevel permission defined: .github/workflows/web-continuous.yml:1","Warn: no topLevel permission defined: .github/workflows/windows-continuous.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/npm-deploy.yml:12"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.63.1 not signed: https://api.github.com/repos/google/filament/releases/239732513","Warn: release artifact v1.63.0 not signed: https://api.github.com/repos/google/filament/releases/237856053","Warn: release artifact v1.62.2 not signed: https://api.github.com/repos/google/filament/releases/236653054","Warn: release artifact v1.62.1 not signed: https://api.github.com/repos/google/filament/releases/232364351","Warn: release artifact v1.62.0 not signed: https://api.github.com/repos/google/filament/releases/228956038","Warn: release artifact v1.63.1 does not have provenance: https://api.github.com/repos/google/filament/releases/239732513","Warn: release artifact v1.63.0 does not have provenance: https://api.github.com/repos/google/filament/releases/237856053","Warn: release artifact v1.62.2 does not have provenance: https://api.github.com/repos/google/filament/releases/236653054","Warn: release artifact v1.62.1 does not have provenance: https://api.github.com/repos/google/filament/releases/232364351","Warn: release artifact v1.62.0 does not have provenance: https://api.github.com/repos/google/filament/releases/228956038"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool is not run on all commits -- score normalized to 9","details":["Warn: 24 commits out of 25 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: docs/remote/filament.wasm:1","Warn: binary detected: docs_src/src_raw/remote/filament.wasm:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/GNU.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/IsNAN.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/MacOSX.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/SVR4.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/absolute.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/coff_archive.lib:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/coff_archive_short.lib:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/corrupt-archive.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/corrupt-version.elf-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/corrupt.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/darwin-m-test1.mach0-armv7:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/darwin-m-test2.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/darwin-m-test3.macho-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/dext-test.elf-mips64r2:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/elf-mip64-reloc.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/elf-reloc-no-sym.x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/elf-versioning-test.i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/elf-versioning-test.x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/hello-world.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/hello-world.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/invalid-bad-rel-type.elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/invalid-section-index.elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/invalid-section-size.elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/invalid-sh_entsize.elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/invalid-strtab-non-null.elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/invalid-strtab-size.elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/invalid-strtab-type.elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/liblong_filenames.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/libsimple_archive.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-archive-unsorted-x86_64.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-archive-x86_64.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-data-in-code.macho-thumbv7:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-empty-kext-bundle-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-hello-g.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-bad-symbol-index:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-header:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-no-size-for-sections:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-section-index-getSectionRawName:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-symbol-name-past-eof:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-too-small-load-command:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-too-small-segment-load-command:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-invalid-zero-ncmds:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-no-exports.dylib:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-rpath-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-text-data-bss.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-text-sections.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-text.thumb:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-universal-archive.x86_64.i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho-universal.x86_64.i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho64-invalid-incomplete-load-command:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho64-invalid-incomplete-segment-load-command:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho64-invalid-no-size-for-sections:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho64-invalid-too-small-load-command:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/macho64-invalid-too-small-segment-load-command:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/micro-mips.elf-mipsel:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/no-section-table.so:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/no-sections.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/no-start-symbol.elf-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/program-headers.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/program-headers.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/program-headers.mips:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/program-headers.mips64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/relocatable-with-section-address.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/relocation-dynamic.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/relocation-relocatable.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/relocations.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/sectionGroup.elf.x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/shared-object-test.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/shared-object-test.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/stackmap-test.macho-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/symtab-only.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/thin-path.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/thin.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/thumb-symbols.elf.arm:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-executable-test.macho-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-label-test.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test.elf-hexagon:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test.elf-mips64el:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test.elf-mipsel:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test.macho-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test2.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/trivial-object-test2.macho-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/unwind-section.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/weak-global-symbol.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/weak.elf-x86-64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/Object/Inputs/xpg4.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic-archive.macho.x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic-lto-dw4.macho.x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic-lto-dw4.macho.x86_64.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic-lto.macho.x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic-lto.macho.x86_64.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic.macho.x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic1.macho.x86_64.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic2.macho.x86_64.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/basic3.macho.x86_64.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/dsymutil/Inputs/libbasic.a:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-cov/Inputs/binary-formats.macho32b:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-cov/Inputs/binary-formats.macho32l:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-cov/Inputs/binary-formats.macho64l:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-cov/Inputs/universal-binary:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-cxxdump/Inputs/trivial.obj.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/AArch64/Inputs/ObjC.exe.macho-aarch64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/AArch64/Inputs/ObjC.obj.macho-aarch64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/AArch64/Inputs/hello.exe.macho-aarch64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/AArch64/Inputs/hello.obj.macho-aarch64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/AArch64/Inputs/link-opt-hints.macho-aarch64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/AArch64/Inputs/print-mrs.obj.macho-aarch64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/ARM/Inputs/data-in-code.macho-arm:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/ARM/Inputs/hello.exe.macho-arm:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/ARM/Inputs/hello.obj.macho-arm:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/bad-ordinal.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/bind.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/bind2.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/common-symbol-elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/compact-unwind.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/compact-unwind.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/export.dll.coff-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/exports-trie.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/lazy-bind.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/nop.exe.coff-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/proc-specific-section-elf:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/rebase.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/unwind-info-no-relocs.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/unwind-info.macho-arm64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/unwind-info.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/weak-bind.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/Inputs/win64-unwind.exe.coff-x86_64.exe:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/ObjC.exe.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/ObjC.obj.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/Objc1.32bit.exe.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/Objc1.32bit.obj.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/Objc2.32bit.exe.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/Objc2.32bit.obj.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/Objc2.64bit.exe.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/Objc2.64bit.obj.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/dylibLoadKinds.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/dylibModInit.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/dylibRoutines.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/dylibSubClient.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/dylibSubFramework.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/dylibSubLibrary.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/dylibSubUmbrella.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/exeThread.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/hello.exe.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/hello.exe.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/hello.obj.macho-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/hello.obj.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/hello_cpp.exe.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/linkerOption.macho-x86_64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/macho-universal-archive.x86_64.i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/macho-universal.x86_64.i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/out-of-section-sym.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-objdump/X86/Inputs/trivial.obj.elf-i386:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-symbolizer/Inputs/dsym-test-exe:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-symbolizer/Inputs/dsym-test-exe-differentname.dSYM/Contents/Resources/DWARF/dsym-test-exe-second:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-symbolizer/Inputs/dsym-test-exe-second:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-symbolizer/Inputs/dsym-test-exe.dSYM/Contents/Resources/DWARF/dsym-test-exe:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-symbolizer/Inputs/fat.o:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-symbolizer/Inputs/ppc64:1","Warn: binary detected: third_party/dawn/third_party/dxc/test/tools/llvm-symbolizer/pdb/Inputs/test.exe:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/dummy_library_elf_32.dll:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/dummy_library_elf_64.dll:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/dummy_library_pe_32.dll:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/dummy_library_pe_32.so:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/dummy_library_pe_64.dll:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/dummy_library_pe_64.so:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/libdummy_library_elf_32.so:1","Warn: binary detected: third_party/dawn/third_party/vulkan-loader/src/tests/framework/data/binaries/libdummy_library_elf_64.so:1","Warn: binary detected: third_party/draco/javascript/draco_decoder.wasm:1","Warn: binary detected: third_party/draco/javascript/draco_decoder_gltf.wasm:1","Warn: binary detected: third_party/draco/javascript/draco_encoder.wasm:1","Warn: binary detected: third_party/draco/javascript/npm/draco3d/draco_decoder.wasm:1","Warn: binary detected: third_party/draco/javascript/npm/draco3d/draco_encoder.wasm:1","Warn: binary detected: third_party/draco/javascript/npm/draco3dgltf/draco_decoder_gltf.wasm:1","Warn: binary detected: third_party/draco/javascript/npm/draco3dgltf/draco_encoder.wasm:1","Warn: binary detected: third_party/libsdl2/android-project/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: CLibFuzzer integration found: third_party/cgltf/fuzz/main.c:11","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/block_decompress.c:29","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/block_round_trip.c:56","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/decompress_cross_format.c:24","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/decompress_dstSize_tooSmall.c:30","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/dictionary_decompress.c:27","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/dictionary_loader.c:69","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/dictionary_round_trip.c:110","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/dictionary_stream_round_trip.c:149","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/fse_read_ncount.c:28","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/generate_sequences.c:49","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/huf_decompress.c:25","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/huf_round_trip.c:41","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/raw_dictionary_round_trip.c:70","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/regression_driver.c:78","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/seekable_roundtrip.c:20","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/sequence_compression_api.c:336","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/simple_compress.c:29","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/simple_decompress.c:28","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/simple_round_trip.c:141","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/stream_decompress.c:68","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/stream_round_trip.c:156","Info: CLibFuzzer integration found: third_party/zstd/tests/fuzz/zstd_frame_info.c:22","Info: CppLibFuzzer integration found: third_party/dawn/src/tint/cmd/fuzz/wgsl/main_fuzz.cc:76","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:54","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:62","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:67","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:80","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:96","Info: CppLibFuzzer integration found: third_party/dawn/third_party/protobuf/third_party/utf8_range/fuzz/utf8_validity_fuzzer.cc:11","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_mesh_decoder_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_mesh_decoder_without_dequantization_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_pc_decoder_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_pc_decoder_without_dequantization_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/libpng/contrib/oss-fuzz/libpng_read_fuzzer.cc:100","Info: CppLibFuzzer integration found: third_party/dawn/src/tint/cmd/fuzz/wgsl/main_fuzz.cc:76","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:54","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:62","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:67","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:80","Info: CppLibFuzzer integration found: third_party/dawn/third_party/libprotobuf-mutator/src/src/libfuzzer/libfuzzer_test.cc:96","Info: CppLibFuzzer integration found: third_party/dawn/third_party/protobuf/third_party/utf8_range/fuzz/utf8_validity_fuzzer.cc:11","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_mesh_decoder_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_mesh_decoder_without_dequantization_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_pc_decoder_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/draco/src/draco/tools/fuzz/draco_pc_decoder_without_dequantization_fuzzer.cc:21","Info: CppLibFuzzer integration found: third_party/libpng/contrib/oss-fuzz/libpng_read_fuzzer.cc:100","Info: CppLibFuzzer integration found: third_party/dawn/src/dawn/fuzzers/DawnWireServerAndD3D12BackendFuzzer.cpp:35","Info: CppLibFuzzer integration found: third_party/dawn/src/dawn/fuzzers/DawnWireServerAndFrontendFuzzer.cpp:35","Info: CppLibFuzzer integration found: third_party/dawn/src/dawn/fuzzers/DawnWireServerAndVulkanBackendFuzzer.cpp:36","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/FuzzerMain.cpp:16","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/FuzzerMain.cpp:19","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/CounterTest.cpp:5","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/CxxTokensTest.cpp:13","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/DFSanMemcmpTest.cpp:7","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/DFSanSimpleCmpTest.cpp:7","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/FourIndependentBranchesTest.cpp:7","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/FullCoverageSetTest.cpp:7","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/FuzzerUnittest.cpp:6","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/FuzzerUnittest.cpp:7","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/FuzzerUnittest.cpp:8","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/InfiniteTest.cpp:11","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/NullDerefTest.cpp:11","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/SimpleTest.cpp:10","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/lib/Fuzzer/test/TimeoutTest.cpp:10","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/tools/clang/tools/clang-format/fuzzer/ClangFormatFuzzer.cpp:18","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/tools/clang/tools/clang-fuzzer/ClangFuzzer.cpp:23","Info: CppLibFuzzer integration found: third_party/dawn/third_party/dxc/tools/llvm-dwarfdump/fuzzer/llvm-dwarfdump-fuzzer.cpp:25","Info: CppLibFuzzer integration found: third_party/meshoptimizer/tools/codecfuzz.cpp:24","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_as_fuzzer.cpp:23","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_binary_parser_fuzzer.cpp:21","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_dis_fuzzer.cpp:23","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_fuzz_fuzzer.cpp:23","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_opt_legalization_fuzzer.cpp:22","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_opt_performance_fuzzer.cpp:22","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_opt_size_fuzzer.cpp:22","Info: CppLibFuzzer integration found: third_party/spirv-tools/test/fuzzers/spvtools_val_fuzzer.cpp:21"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: malformed csproj file: error parsing csproj file","Warn: malformed csproj file: error parsing csproj file","Info: Possibly incomplete results: error parsing shell code: not a valid arithmetic operator: docs_src: docs_src/build/postsubmit.sh:0","Info: Possibly incomplete results: error parsing shell code: invalid UTF-8 encoding: third_party/dawn/third_party/dxc/utils/lit/tests/Inputs/shtest-format/external_shell/write-bad-encoding.sh:0","Info: Possibly incomplete results: error parsing shell code: case patterns must be separated with |: third_party/libsdl2/sdl2-config.in:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-continuous.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/android-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-continuous.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/ios-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-continuous.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/ios-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux-continuous.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/linux-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux-continuous.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/linux-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mac-continuous.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/mac-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mac-continuous.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/mac-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-deploy.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/npm-deploy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-deploy.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/npm-deploy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/postsubmit.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/postsubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/postsubmit.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/postsubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/presubmit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:241: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/web-continuous.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/web-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/web-continuous.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/web-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-continuous.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/windows-continuous.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-continuous.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/filament/windows-continuous.yml/main?enable=pin","Warn: containerImage not pinned by hash: .github/actions/verify-release-notes/Dockerfile:1: pin your Docker image by updating python:3.10.4 to python:3.10.4@sha256:cddebe04ec7846e28870cf8624b46313a22e6407b51ced3776588784caa12d27","Warn: containerImage not pinned by hash: tools/zbloat/Dockerfile:9: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: pipCommand not pinned by hash: .github/actions/verify-release-notes/Dockerfile:3","Warn: downloadThenRun not pinned by hash: tools/zbloat/Dockerfile:24-25","Warn: pipCommand not pinned by hash: build/common/get-mesa.sh:39","Warn: downloadThenRun not pinned by hash: docs_src/build/install_mdbook.sh:64","Warn: pipCommand not pinned by hash: test/renderdiff/generate.sh:33","Warn: nugetCommand not pinned by hash: third_party/dawn/third_party/protobuf/csharp/build_release.sh:10: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: third_party/dawn/third_party/protobuf/csharp/buildall.sh:9: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: third_party/dawn/third_party/protobuf/csharp/compatibility_tests/v3.0.0/test.sh:21: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: third_party/dawn/third_party/protobuf/csharp/compatibility_tests/v3.0.0/test.sh:22: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: downloadThenRun not pinned by hash: third_party/spirv-tools/kokoro/macos-clang-release-bazel/build.sh:40","Warn: downloadThenRun not pinned by hash: third_party/spirv-tools/kokoro/macos-clang-release-bazel/build.sh:44","Warn: npmCommand not pinned by hash: third_party/spirv-tools/utils/vscode/install_vscode.sh:34","Warn: pipCommand not pinned by hash: .github/workflows/postsubmit.yml:21","Warn: pipCommand not pinned by hash: .github/workflows/postsubmit.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/presubmit.yml:127","Warn: pipCommand not pinned by hash: .github/workflows/presubmit.yml:190","Info:   0 out of  40 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   7 pipCommand dependencies pinned","Info:   0 out of   4 downloadThenRun dependencies pinned","Info:   0 out of   4 nugetCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"75 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: CVE-2020-27304","Warn: Project is vulnerable to: GO-2025-3488 / GHSA-6v2p-p543-phr9","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: RUSTSEC-2024-0436","Warn: Project is vulnerable to: GO-2024-2611 / GHSA-8r3f-844c-mc37","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-4jrv-ppp4-jm57","Warn: Project is vulnerable to: OSV-2020-2200","Warn: Project is vulnerable to: OSV-2020-778","Warn: Project is vulnerable to: OSV-2020-800","Warn: Project is vulnerable to: OSV-2020-824","Warn: Project is vulnerable to: OSV-2020-828","Warn: Project is vulnerable to: OSV-2021-1082","Warn: Project is vulnerable to: OSV-2021-1176","Warn: Project is vulnerable to: OSV-2021-1177","Warn: Project is vulnerable to: OSV-2021-1181","Warn: Project is vulnerable to: OSV-2021-1183","Warn: Project is vulnerable to: OSV-2021-1640","Warn: Project is vulnerable to: OSV-2021-482","Warn: Project is vulnerable to: OSV-2021-635","Warn: Project is vulnerable to: OSV-2021-646","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-jxhc-q857-3j6g","Warn: Project is vulnerable to: GHSA-48wp-p9qv-4j64","Warn: Project is vulnerable to: GHSA-4qw4-jpp4-8gvp","Warn: Project is vulnerable to: GHSA-636f-xm5j-pj9m","Warn: Project is vulnerable to: GHSA-7vh7-fw88-wj87","Warn: Project is vulnerable to: GHSA-fmx4-26r3-wxpf","Warn: Project is vulnerable to: GHSA-52p9-v744-mwjj","Warn: Project is vulnerable to: GHSA-mqm2-cgpr-p4m6","Warn: Project is vulnerable to: GHSA-286v-pcf5-25rc","Warn: Project is vulnerable to: GHSA-2qc6-mcvw-92cw","Warn: Project is vulnerable to: GHSA-2rr5-8q37-2w7h","Warn: Project is vulnerable to: GHSA-353f-x4gh-cqq8","Warn: Project is vulnerable to: GHSA-59gp-qqm7-cw4j","Warn: Project is vulnerable to: GHSA-5w6v-399v-w3cc","Warn: Project is vulnerable to: GHSA-7rrm-v45f-jp64","Warn: Project is vulnerable to: GHSA-cgx6-hpwq-fhv5","Warn: Project is vulnerable to: GHSA-crjr-9rc5-ghw8","Warn: Project is vulnerable to: GHSA-fq42-c5rg-92c2","Warn: Project is vulnerable to: GHSA-gx8x-g87m-h5q6","Warn: Project is vulnerable to: GHSA-jc36-42cf-vqwj","Warn: Project is vulnerable to: GHSA-jw9f-hh49-cvp9","Warn: Project is vulnerable to: GHSA-mrxw-mxhj-p664","Warn: Project is vulnerable to: GHSA-pxvg-2qj5-37jq","Warn: Project is vulnerable to: GHSA-r95h-9x8f-r3f7","Warn: Project is vulnerable to: GHSA-v4f8-2847-rwm7","Warn: Project is vulnerable to: GHSA-v6gp-9mmm-c6p5","Warn: Project is vulnerable to: GHSA-vr8q-g5c7-m54m","Warn: Project is vulnerable to: GHSA-vvfq-8hwr-qm4m","Warn: Project is vulnerable to: GHSA-xc9x-jj77-9p9j","Warn: Project is vulnerable to: GHSA-xh29-r2w5-wx8m","Warn: Project is vulnerable to: GHSA-xxx9-3xcr-gjj3","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: CVE-2019-12222","Warn: Project is vulnerable to: CVE-2019-13616","Warn: Project is vulnerable to: CVE-2019-14906","Warn: Project is vulnerable to: CVE-2019-7572","Warn: Project is vulnerable to: CVE-2019-7573","Warn: Project is vulnerable to: CVE-2019-7574","Warn: Project is vulnerable to: CVE-2019-7575","Warn: Project is vulnerable to: CVE-2019-7576","Warn: Project is vulnerable to: CVE-2019-7577","Warn: Project is vulnerable to: CVE-2019-7578","Warn: Project is vulnerable to: CVE-2019-7635","Warn: Project is vulnerable to: CVE-2019-7636","Warn: Project is vulnerable to: CVE-2019-7637","Warn: Project is vulnerable to: CVE-2019-7638","Warn: Project is vulnerable to: CVE-2021-33657","Warn: Project is vulnerable to: CVE-2022-4743","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:44:00.122Z","repository_id":37390680,"created_at":"2025-08-15T22:44:00.123Z","updated_at":"2025-08-15T22:44:00.123Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29116450,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-05T05:31:32.482Z","status":"ssl_error","status_checked_at":"2026-02-05T05:31:29.075Z","response_time":65,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["3d-graphics","android","gltf","gltf-viewer","graphics","metal","opengl","opengl-es","pbr","real-time","vulkan","wasm","webgl"],"created_at":"2024-07-31T03:01:35.239Z","updated_at":"2026-02-05T08:01:20.734Z","avatar_url":"https://github.com/google.png","language":"C++","readme":null,"funding_links":[],"categories":["C++","Graphics","游戏","Libraries","\u003ca name=\"cpp\"\u003e\u003c/a\u003eC++","Digital Content Creation Software (DCCs)"],"sub_categories":["网络服务_其他","C++","3D realtime engines"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Ffilament","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgoogle%2Ffilament","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Ffilament/lists"}