{"id":15037118,"url":"https://github.com/googlecontainertools/skaffold","last_synced_at":"2026-04-13T21:01:18.136Z","repository":{"id":37390609,"uuid":"118654121","full_name":"GoogleContainerTools/skaffold","owner":"GoogleContainerTools","description":"Easy and Repeatable Kubernetes Development","archived":false,"fork":false,"pushed_at":"2026-04-07T15:04:26.000Z","size":165133,"stargazers_count":15795,"open_issues_count":876,"forks_count":1696,"subscribers_count":179,"default_branch":"main","last_synced_at":"2026-04-07T17:08:13.106Z","etag":null,"topics":["containers","developer-tools","docker","kubernetes"],"latest_commit_sha":null,"homepage":"https://skaffold.dev/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GoogleContainerTools.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":"ROADMAP.md","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-01-23T18:51:29.000Z","updated_at":"2026-04-07T15:04:47.000Z","dependencies_parsed_at":"2024-01-15T17:42:10.976Z","dependency_job_id":"e626ee73-69c8-4a03-af3e-75689cd20fd8","html_url":"https://github.com/GoogleContainerTools/skaffold","commit_stats":{"total_commits":6718,"total_committers":433,"mean_commits":15.51501154734411,"dds":0.7750818696040488,"last_synced_commit":"63aeb7073b1fe0a3cf956bb3a292c32e7e3c3144"},"previous_names":["googlecloudplatform/skaffold"],"tags_count":208,"template":false,"template_full_name":null,"purl":"pkg:github/GoogleContainerTools/skaffold","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GoogleContainerTools","download_url":"https://codeload.github.com/GoogleContainerTools/skaffold/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/sbom","scorecard":{"id":58546,"data":{"date":"2025-08-10T06:36:53Z","repo":{"name":"github.com/GoogleContainerTools/skaffold","commit":"4ef420a8a5670824f0c1bf054a876eeed30a028e"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7,"checks":[{"name":"Maintained","score":10,"reason":"11 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:23","Info: jobLevel 'actions' permission set to 'read': .github/workflows/scorecards.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecards.yml:22","Info: topLevel permissions set to 'read-all': .github/workflows/codeql-analysis.yml:11","Info: topLevel permissions set to 'read-all': .github/workflows/integration-linux.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/linters-checks.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/scorecards.yml:11","Info: topLevel permissions set to 'read-all': .github/workflows/unit-tests-darwin.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/unit-tests-linux.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/unit-tests-windows.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/verify-examples.yml:10","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":6,"reason":"binaries present in source code","details":["Warn: binary detected: examples/jib-gradle/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: examples/jib-sync/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: integration/examples/jib-gradle/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: integration/examples/jib-sync/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'up-to-date branches' is required to merge on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":6,"reason":"4 out of the last 5 releases have a total of 4 signed artifacts.","details":["Info: signed release artifact: skaffold-darwin-amd64.sha256.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.16.1","Info: signed release artifact: skaffold-darwin-amd64.sha256.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.16.0","Info: signed release artifact: skaffold-darwin-amd64.sha256.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.15.0","Info: signed release artifact: skaffold-darwin-amd64.1.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.14.2","Warn: release artifact v2.14.1 not signed: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/198652527","Warn: release artifact v2.16.1 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/226055925","Warn: release artifact v2.16.0 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/216817655","Warn: release artifact v2.15.0 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/210420193","Warn: release artifact v2.14.2 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/206884032","Warn: release artifact v2.14.1 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/198652527"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"CI-Tests","score":9,"reason":"29 out of 30 merged PRs checked by a CI test -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 29 contributing companies or organizations","details":["Info: found contributions from: Agoric, CodeStory, GoogleCloudPlatform, GoogleContainerTools, agoric, atlassian, baseup, buildpacks, chainguard-dev, codegroove.dev, docker, duke university, endojs, google, googlecloudplatform, googlers, internetitem, jenkins-x, kubeflow, media molecule, multi-factor-auth-users, sigstore, software-craftsmanship-new-york, spinnaker, standard-input, thesoul publishing, thiggle, vmware-tanzu, wolfi-dev"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters-checks.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/linters-checks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters-checks.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/linters-checks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecards.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/scorecards.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecards.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecards.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-darwin.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-darwin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-darwin.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-darwin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-darwin.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-darwin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-linux.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-linux.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-windows.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-windows.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-windows.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-examples.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/verify-examples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-examples.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/verify-examples.yml/main?enable=pin","Warn: containerImage not pinned by hash: codelab/01_kpt-validate/resources/sample-app/php-redis/Dockerfile:15: pin your Docker image by updating php:5-apache to php:5-apache@sha256:0a40fd273961b99d8afe69a61a68c73c04bc0caa9de384d3b2dd9e7986eec86d","Warn: containerImage not pinned by hash: codelab/02_kpt-deploy/resources/sample-app/php-redis/Dockerfile:15: pin your Docker image by updating php:5-apache to php:5-apache@sha256:0a40fd273961b99d8afe69a61a68c73c04bc0caa9de384d3b2dd9e7986eec86d","Warn: containerImage not pinned by hash: codelab/03_buildpacks-runimage-override/base/Dockerfile:1: pin your Docker image by updating gcr.io/gcp-runtimes/ubuntu_18_0_4 to gcr.io/gcp-runtimes/ubuntu_18_0_4@sha256:a6aba56fdd9284d1b1397c7703203417bca3b518e78612783d199203c3cdf2fa","Warn: containerImage not pinned by hash: deploy/buildpacks/Dockerfile:15: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: deploy/cross/Dockerfile:15","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile:16","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile:19","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile:24","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:18","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:28","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:38","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:47","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:56","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:65","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:74","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:83","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:92","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:105","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:116","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:154","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:19","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:27","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:38","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:48","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:57","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:66","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:79","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:106","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.skaffold:2","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.skaffold:4: pin your Docker image by updating gcr.io/distroless/static-debian11 to gcr.io/distroless/static-debian11@sha256:1dbe426d60caed5d19597532a2d74c8056cd7b1674042b88f7328690b5ead8ed","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:16","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:28","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:34","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:40","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:50","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:56","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:16","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:28","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:34","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:40","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:50","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:55","Warn: containerImage not pinned by hash: docs-v1/content/en/samples/builders/artifact-dependencies/Dockerfile.app:2","Warn: containerImage not pinned by hash: docs-v1/content/en/samples/builders/artifact-dependencies/Dockerfile.app:4","Warn: containerImage not pinned by hash: docs-v1/content/en/samples/builders/artifact-dependencies/Dockerfile.base:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: docs-v2/content/en/samples/builders/artifact-dependencies/Dockerfile.app:2","Warn: containerImage not pinned by hash: docs-v2/content/en/samples/builders/artifact-dependencies/Dockerfile.app:4","Warn: containerImage not pinned by hash: docs-v2/content/en/samples/builders/artifact-dependencies/Dockerfile.base:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/compose/Dockerfile:1","Warn: containerImage not pinned by hash: examples/compose/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/cross-platform-builds/Dockerfile:1","Warn: containerImage not pinned by hash: examples/cross-platform-builds/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/custom-buildx/Dockerfile:6","Warn: containerImage not pinned by hash: examples/custom-buildx/Dockerfile:18: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/custom-tests/Dockerfile:1","Warn: containerImage not pinned by hash: examples/custom-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/docker-deploy/bert/Dockerfile:1","Warn: containerImage not pinned by hash: examples/docker-deploy/bert/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/docker-deploy/ernie/Dockerfile:1","Warn: containerImage not pinned by hash: examples/docker-deploy/ernie/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/gcb-kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: examples/gcb-kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/generate-pipeline/Dockerfile:1","Warn: containerImage not pinned by hash: examples/generate-pipeline/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/getting-started-kustomize/app/Dockerfile:1","Warn: containerImage not pinned by hash: examples/getting-started-kustomize/app/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/getting-started/Dockerfile:1","Warn: containerImage not pinned by hash: examples/getting-started/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/google-cloud-build/Dockerfile:1","Warn: containerImage not pinned by hash: examples/google-cloud-build/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:1","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/cloud-spanner/Dockerfile:1: pin your Docker image by updating google/cloud-sdk to google/cloud-sdk@sha256:ff2b1f2d955b296dbee2b90b3fcc4510f7b94c6c07f63eb565d2d656b7dae49b","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/service/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/helm-deployment-dependencies/Dockerfile:1: pin your Docker image by updating nginx:stable to nginx:stable@sha256:7935b9ee80fe4076ce8ca637fe7bb0c7a1268e2bd854032a0563ecc96bfa6747","Warn: containerImage not pinned by hash: examples/helm-deployment/Dockerfile:1","Warn: containerImage not pinned by hash: examples/helm-deployment/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/helm-render/Dockerfile:1","Warn: containerImage not pinned by hash: examples/helm-render/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/hot-reload/node/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/hot-reload/python/Dockerfile:1: pin your Docker image by updating python:3.9-alpine to python:3.9-alpine@sha256:372f3cfc1738ed91b64c7d36a7a02d5c3468ec1f60c906872c3fd346dda8cbbb","Warn: containerImage not pinned by hash: examples/kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: examples/kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/lifecycle-hooks/Dockerfile:1","Warn: containerImage not pinned by hash: examples/lifecycle-hooks/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: examples/microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: examples/microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: examples/microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: examples/multi-config-microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: examples/multiple-renderers/backend/src/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multiple-renderers/backend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/multiple-renderers/frontend/src/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multiple-renderers/frontend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/nodejs/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/profile-patches/base-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profile-patches/base-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profile-patches/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profile-patches/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profile-patches/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profile-patches/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profiles/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profiles/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profiles/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profiles/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/react-reload-docker/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/react-reload/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/ruby/backend/Dockerfile:1: pin your Docker image by updating ruby:2.7 to ruby:2.7@sha256:2347de892e419c7160fc21dec721d5952736909f8c3fbb7f84cb4a07aaf9ce7d","Warn: containerImage not pinned by hash: examples/simple-artifact-dependency/app/Dockerfile:2","Warn: containerImage not pinned by hash: examples/simple-artifact-dependency/app/Dockerfile:10","Warn: containerImage not pinned by hash: examples/simple-artifact-dependency/base/Dockerfile:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/structure-tests/Dockerfile:1","Warn: containerImage not pinned by hash: examples/structure-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/tagging-with-environment-variables/Dockerfile:1","Warn: containerImage not pinned by hash: examples/tagging-with-environment-variables/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/typescript/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/using-env-file/Dockerfile:1","Warn: containerImage not pinned by hash: examples/using-env-file/Dockerfile:7: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: hack/proto/Dockerfile:15","Warn: containerImage not pinned by hash: hack/proto/Dockerfile:94","Warn: containerImage not pinned by hash: integration/examples/compose/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/compose/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/cross-platform-builds/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/cross-platform-builds/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/custom-buildx/Dockerfile:6","Warn: containerImage not pinned by hash: integration/examples/custom-buildx/Dockerfile:18: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/custom-tests/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/custom-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/bert/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/bert/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/ernie/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/ernie/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/gcb-kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/gcb-kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/generate-pipeline/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/generate-pipeline/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/getting-started-kustomize/app/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/getting-started-kustomize/app/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/getting-started/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/getting-started/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/google-cloud-build/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/google-cloud-build/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/cloud-spanner/Dockerfile:1: pin your Docker image by updating google/cloud-sdk to google/cloud-sdk@sha256:ff2b1f2d955b296dbee2b90b3fcc4510f7b94c6c07f63eb565d2d656b7dae49b","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/service/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/helm-deployment-dependencies/Dockerfile:1: pin your Docker image by updating nginx:stable to nginx:stable@sha256:7935b9ee80fe4076ce8ca637fe7bb0c7a1268e2bd854032a0563ecc96bfa6747","Warn: containerImage not pinned by hash: integration/examples/helm-deployment/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/helm-deployment/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/helm-render/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/helm-render/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/hot-reload/node/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/hot-reload/python/Dockerfile:1: pin your Docker image by updating python:3.9-alpine to python:3.9-alpine@sha256:372f3cfc1738ed91b64c7d36a7a02d5c3468ec1f60c906872c3fd346dda8cbbb","Warn: containerImage not pinned by hash: integration/examples/kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/lifecycle-hooks/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/lifecycle-hooks/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/backend/src/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/backend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/frontend/src/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/frontend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/nodejs/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/profile-patches/base-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/base-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profiles/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profiles/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profiles/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profiles/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/react-reload-docker/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/react-reload/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/ruby/backend/Dockerfile:1: pin your Docker image by updating ruby:2.7 to ruby:2.7@sha256:2347de892e419c7160fc21dec721d5952736909f8c3fbb7f84cb4a07aaf9ce7d","Warn: containerImage not pinned by hash: integration/examples/simple-artifact-dependency/app/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/simple-artifact-dependency/app/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/simple-artifact-dependency/base/Dockerfile:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/structure-tests/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/structure-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/tagging-with-environment-variables/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/tagging-with-environment-variables/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/typescript/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/using-env-file/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/using-env-file/Dockerfile:7: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: downloadThenRun not pinned by hash: deploy/skaffold/Dockerfile.deps:139","Warn: npmCommand not pinned by hash: deploy/webhook-v2/Dockerfile:42","Warn: npmCommand not pinned by hash: deploy/webhook-v2/Dockerfile:45","Warn: npmCommand not pinned by hash: deploy/webhook/Dockerfile:42","Warn: npmCommand not pinned by hash: deploy/webhook/Dockerfile:45","Warn: npmCommand not pinned by hash: examples/hot-reload/node/Dockerfile:14","Warn: pipCommand not pinned by hash: examples/hot-reload/python/Dockerfile:3","Warn: pipCommand not pinned by hash: examples/hot-reload/python/Dockerfile:16","Warn: npmCommand not pinned by hash: examples/nodejs/backend/Dockerfile:14","Warn: npmCommand not pinned by hash: examples/react-reload-docker/app/Dockerfile:9","Warn: npmCommand not pinned by hash: examples/react-reload/app/Dockerfile:9","Warn: npmCommand not pinned by hash: examples/typescript/backend/Dockerfile:14","Warn: npmCommand not pinned by hash: integration/examples/hot-reload/node/Dockerfile:14","Warn: pipCommand not pinned by hash: integration/examples/hot-reload/python/Dockerfile:3","Warn: pipCommand not pinned by hash: integration/examples/hot-reload/python/Dockerfile:16","Warn: npmCommand not pinned by hash: integration/examples/nodejs/backend/Dockerfile:14","Warn: npmCommand not pinned by hash: integration/examples/react-reload-docker/app/Dockerfile:9","Warn: npmCommand not pinned by hash: integration/examples/react-reload/app/Dockerfile:9","Warn: npmCommand not pinned by hash: integration/examples/typescript/backend/Dockerfile:14","Warn: goCommand not pinned by hash: vendor/github.com/agext/levenshtein/test.sh:5","Warn: goCommand not pinned by hash: vendor/github.com/go-git/go-git/v5/oss-fuzz.sh:20","Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: vendor/github.com/pelletier/go-toml/benchmark.sh:10","Info:   0 out of  23 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of 202 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   0 out of  14 npmCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:  10 out of  14 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"46 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-cx7f-g6mp-7hqm","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-w3c8-7r8f-9jp8","Warn: Project is vulnerable to: GHSA-4grg-w6v8-c28g","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2025-3488 / GHSA-6v2p-p543-phr9","Warn: Project is vulnerable to: GO-2023-1495 / GHSA-fxg5-wq6x-vr4w","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GO-2023-2153 / GHSA-m425-mq94-257g / GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2022-1059 / GHSA-69ch-w2m2-3vjp","Warn: Project is vulnerable to: GO-2024-2611 / GHSA-8r3f-844c-mc37","Warn: Project is vulnerable to: GO-2025-3770","Warn: Project is vulnerable to: GO-2025-3787 / GHSA-fv92-fjc5-jj9h","Warn: Project is vulnerable to: PYSEC-2018-66 / GHSA-562c-5r94-xh97","Warn: Project is vulnerable to: PYSEC-2019-179 / GHSA-5wv5-4vpf-pj6m","Warn: Project is vulnerable to: PYSEC-2023-62 / GHSA-m2qf-hxjv-5gpq"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T01:13:47.349Z","repository_id":37390609,"created_at":"2025-08-15T01:13:47.349Z","updated_at":"2025-08-15T01:13:47.349Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31770726,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-13T20:17:16.280Z","status":"ssl_error","status_checked_at":"2026-04-13T20:17:08.216Z","response_time":93,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["containers","developer-tools","docker","kubernetes"],"created_at":"2024-09-24T20:33:26.013Z","updated_at":"2026-04-13T21:01:18.091Z","avatar_url":"https://github.com/GoogleContainerTools.png","language":"Go","readme":"\u003c!-- github does not support `width` with markdown images--\u003e\n\u003cimg src=\"logo/skaffold.png\" width=\"220\"\u003e\n\n---------------------\n\n[![Code Coverage](https://codecov.io/gh/GoogleContainerTools/skaffold/branch/main/graph/badge.svg)](https://codecov.io/gh/GoogleContainerTools/skaffold)\n[![LICENSE](https://img.shields.io/github/license/GoogleContainerTools/skaffold.svg)](https://github.com/GoogleContainerTools/skaffold/blob/main/LICENSE)\n[![Releases](https://img.shields.io/github/release-pre/GoogleContainerTools/skaffold.svg)](https://github.com/GoogleContainerTools/skaffold/releases)\n\nSkaffold is a command line tool that facilitates continuous development for\nKubernetes applications. You can iterate on your application source code\nlocally then deploy to local or remote Kubernetes clusters. Skaffold handles\nthe workflow for building, pushing and deploying your application. It also\nprovides building blocks and describe customizations for a CI/CD pipeline.\n\n---------------------\n\n## [Install Skaffold](https://skaffold.dev/docs/install/)\n\nOr, check out our [Github Releases](https://github.com/GoogleContainerTools/skaffold/releases) page for release info or to install a specific version.\n\n![Demo](docs/static/images/intro.gif)\n\n## Features\n\n* Blazing fast local development\n  * **optimized source-to-deploy** - Skaffold detects changes in your source code and handles the pipeline to\n  **build**, **push**, and **deploy** your application automatically with **policy based image tagging**\n  * **continuous feedback** - Skaffold automatically aggregates logs from deployed resources and forwards container ports to your local machine\n* Project portability\n  * **share with other developers** - Skaffold is the easiest way to **share your project** with the world: `git clone` and `skaffold run`\n  * **context aware** - use Skaffold profiles, user level config, environment variables and flags to describe differences in environments\n  * **CI/CD building blocks** - use `skaffold run` end-to-end, or use individual Skaffold phases to build up your CI/CD pipeline. `skaffold render` outputs hydrated Kubernetes manifests that can be used in GitOps workflows.\n* Pluggable, declarative configuration for your project\n  * **skaffold init** - Skaffold discovers your files and generates its own config file\n  * **multi-component apps** - Skaffold supports applications consisting of multiple components\n  * **bring your own tools** - Skaffold has a pluggable architecture to integrate with any build or deploy tool\n* Lightweight\n  * **client-side only** - Skaffold has no cluster-side component, so there is no overhead or maintenance burden\n  * **minimal pipeline** - Skaffold provides an opinionated, minimal pipeline to keep things simple\n\n### Check out our [examples page](./examples) for more complex workflows!\n\n## IDE integrations\n\nFor a managed experience of Skaffold you can install the Google `Cloud Code` extensions:\n- for [Visual Studio Code](https://cloud.google.com/code/docs/vscode/quickstart-k8s#installing)\n- for [JetBrains IDEs](https://cloud.google.com/code/docs/intellij/quickstart-k8s#installing_the_plugin). \n\nIt can manage and keep Skaffold  up-to-date while providing a more guided startup experience, along with providing and managing other common dependencies, and works with any kubernetes cluster. \n\n## Contributing to Skaffold\n\nWe welcome any contributions from the community with open arms - Skaffold wouldn't be where it is today without contributions from the community! Have a look at our [contribution guide](./CONTRIBUTING.md) for more information on how to get started on sending your first PR.\n\n## Community\n\n**Come hang out with us!**\n\n* We're always around on [#skaffold on Kubernetes Slack](https://kubernetes.slack.com/messages/CABQMSZA6/)\n* [skaffold-users mailing list](https://groups.google.com/forum/#!forum/skaffold-users)\n* Have something you want us to hear? [Give us feedback!](https://skaffold.dev/docs/resources/feedback/)\n\n**Office Hours**\n\nWe hold open office hours on the last Wednesday of the month at 9:30 AM Pacific Time. This is an open forum for anyone to show up and bring ideas, concerns, or just in general come hang out with the team! This is also a great time to get direct feedback on contributions, or give us feedback on ways you think we can improve the project. Come show us how you're using Skaffold!\n\nJoin the [skaffold-users mailing list](https://groups.google.com/forum/#!forum/skaffold-users) to get the calendar invite directly on your calendar.\nYou can access the hangouts invite directly from this calendar invite.\n\n**Survey**\n\nYour feedback is very valuable to us! We have an anonymous user feedback survey - please help us by spending a quick 5 minutes to tell us how satisfied you are with Skaffold, and what improvements we should make! You can also run `skaffold survey` from your terminal to open the survey directly in your default browser.\n\nSurvey Link - https://forms.gle/BMTbGQXLWSdn7vEs6\n\n## Support \n\nSkaffold is generally available and considered production ready.\nDetailed feature maturity information and how we deprecate features are described in our [Deprecation Policy](https://skaffold.dev/docs/references/deprecation).\n\n## Security Disclosures\n\nPlease see our [security disclosure process](SECURITY.md).  All [security advisories](https://github.com/GoogleContainerTools/skaffold/security/advisories) are managed on Github.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgooglecontainertools%2Fskaffold","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgooglecontainertools%2Fskaffold","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgooglecontainertools%2Fskaffold/lists"}