{"id":13566272,"url":"https://github.com/igor-petruk/scriptisto","last_synced_at":"2025-10-21T04:51:02.517Z","repository":{"id":46637882,"uuid":"216895784","full_name":"igor-petruk/scriptisto","owner":"igor-petruk","description":"A language-agnostic \"shebang interpreter\" that enables you to write scripts in compiled languages.","archived":false,"fork":false,"pushed_at":"2025-02-08T18:22:28.000Z","size":284,"stargazers_count":1022,"open_issues_count":9,"forks_count":27,"subscribers_count":13,"default_branch":"master","last_synced_at":"2025-04-03T23:33:41.988Z","etag":null,"topics":["linux","rust","scripting","unix"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/igor-petruk.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-10-22T19:39:48.000Z","updated_at":"2025-04-02T19:41:59.000Z","dependencies_parsed_at":"2024-01-02T14:04:50.412Z","dependency_job_id":"72f4b153-b533-4635-b543-aed0bc74d74c","html_url":"https://github.com/igor-petruk/scriptisto","commit_stats":{"total_commits":302,"total_committers":3,"mean_commits":"100.66666666666667","dds":"0.0066225165562914245","last_synced_commit":"57f887cf0dafc6e70b870b3134075a7765bff12f"},"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/igor-petruk/scriptisto","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/igor-petruk%2Fscriptisto","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/igor-petruk%2Fscriptisto/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/igor-petruk%2Fscriptisto/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/igor-petruk%2Fscriptisto/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/igor-petruk","download_url":"https://codeload.github.com/igor-petruk/scriptisto/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/igor-petruk%2Fscriptisto/sbom","scorecard":{"id":482574,"data":{"date":"2025-08-11","repo":{"name":"github.com/igor-petruk/scriptisto","commit":"511875fe60172f6d8ffa8bfe8eb24355fab9573c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.1,"checks":[{"name":"Code-Review","score":3,"reason":"Found 7/19 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/on-push.yml:1","Warn: no topLevel permission defined: .github/workflows/on-release.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-push.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-push.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-push.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-push.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-push.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-push.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-push.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-push.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-push.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-push.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-push.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-push.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/igor-petruk/scriptisto/on-release.yml/master?enable=pin","Info:   0 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  10 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v2.2.0 not signed: https://api.github.com/repos/igor-petruk/scriptisto/releases/159528704","Warn: release artifact v2.1.1 not signed: https://api.github.com/repos/igor-petruk/scriptisto/releases/98743685","Warn: release artifact v2.1.0 not signed: https://api.github.com/repos/igor-petruk/scriptisto/releases/98740314","Warn: release artifact v2.0.1 not signed: https://api.github.com/repos/igor-petruk/scriptisto/releases/89646682","Warn: release artifact v2.0.0 not signed: https://api.github.com/repos/igor-petruk/scriptisto/releases/88246682","Warn: release artifact v2.2.0 does not have provenance: https://api.github.com/repos/igor-petruk/scriptisto/releases/159528704","Warn: release artifact v2.1.1 does not have provenance: https://api.github.com/repos/igor-petruk/scriptisto/releases/98743685","Warn: release artifact v2.1.0 does not have provenance: https://api.github.com/repos/igor-petruk/scriptisto/releases/98740314","Warn: release artifact v2.0.1 does not have provenance: https://api.github.com/repos/igor-petruk/scriptisto/releases/89646682","Warn: release artifact v2.0.0 does not have provenance: https://api.github.com/repos/igor-petruk/scriptisto/releases/88246682"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 18 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: RUSTSEC-2021-0145 / GHSA-g98v-hv3f-hcfr","Warn: Project is vulnerable to: RUSTSEC-2024-0375","Warn: Project is vulnerable to: RUSTSEC-2024-0370"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T16:59:29.295Z","repository_id":46637882,"created_at":"2025-08-19T16:59:29.295Z","updated_at":"2025-08-19T16:59:29.295Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280207180,"owners_count":26290616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-21T02:00:06.614Z","response_time":58,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["linux","rust","scripting","unix"],"created_at":"2024-08-01T13:02:05.871Z","updated_at":"2025-10-21T04:51:02.500Z","avatar_url":"https://github.com/igor-petruk.png","language":"Rust","funding_links":[],"categories":["Development tools","Rust","开发工具 Development tools","\u003ca name=\"programming\"\u003e\u003c/a\u003eProgramming","\u003ca name=\"Rust\"\u003e\u003c/a\u003eRust"],"sub_categories":["Web Servers","Web服务器 Web Servers","Workflow Automation"],"readme":"# Scriptisto\n\n[![Latest Version](https://img.shields.io/crates/v/scriptisto.svg)](https://crates.io/crates/scriptisto)\n![Build Status](https://github.com/igor-petruk/scriptisto/actions/workflows/on-push.yml/badge.svg)\n![Crates.io License](https://img.shields.io/crates/l/scriptisto)\n![Libraries.io dependency status for latest release](https://img.shields.io/librariesio/release/cargo/scriptisto)\n![GitHub top language](https://img.shields.io/github/languages/top/igor-petruk/scriptisto)\n\n![Crates.io](https://img.shields.io/crates/d/scriptisto?label=Cargo.io%20downloads)\n![GitHub All Releases](https://img.shields.io/github/downloads/igor-petruk/scriptisto/total?logo=Github\u0026label=Github%20Release%20downloads)\n\n[![Packaging status](https://repology.org/badge/vertical-allrepos/scriptisto.svg)](https://repology.org/project/scriptisto/versions)\n\nIt is tool to enable writing one file scripts in languages that require compilation, dependencies fetching or preprocessing.\n\nIt works as a \"shebang\" for those scripts, extracting build instructions from comments. If a script is changed, scriptisto rebuilds it and caches the result. If a script was already built, scriptisto immediately delegates to a binary with only \u003c1 ms overhead.\n\nBuilds in Docker without installing a compiler on a host system are [possible](https://github.com/igor-petruk/scriptisto/wiki/Writing-scripts#builds-in-docker). \n\nAdvantages and use-cases are listed in the [Wiki](https://github.com/igor-petruk/scriptisto/wiki#advantages).\n\n## Demo\n\n```c\n#!/usr/bin/env scriptisto\n\n#include \u003cstdio.h\u003e\n#include \u003cglib.h\u003e\n\n// scriptisto-begin\n// script_src: main.c\n// build_cmd: clang -O2 main.c `pkg-config --libs --cflags glib-2.0` -o ./script\n// scriptisto-end\n\nint main(int argc, char *argv[]) {\n  gchar* user = g_getenv(\"USER\");\n  printf(\"Hello, C! Current user: %s\\n\", user);\n  return 0;\n}\n```\n\n```shell\n$ chmod +x ./script.c\n$ ./script.c\nHello, C! Current user: username\n```\n\n**Note:** some templates such as `rust` take more time to build during the first time. The default behaviour is to supress the build logs, so do not be discouraged that you do not immediately see any output. More info in the [wiki](https://github.com/igor-petruk/scriptisto/wiki/Running-scripts#build-logs).\n\n## Installation\n\nScriptisto is available as a prebuilt statically-linked standalone binary or distributions packages at [Releases](https://github.com/igor-petruk/scriptisto/releases) or at [Crates.io](https://crates.io/crates/scriptisto). \n\nPlease proceed to the [Installation](https://github.com/igor-petruk/scriptisto/wiki/Installation) for instructions.\n\n## Documentation\n\nProceed to our [Wiki](https://github.com/igor-petruk/scriptisto/wiki).\n\n## Disclaimer\n\nThis is not an officially supported Google product.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Figor-petruk%2Fscriptisto","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Figor-petruk%2Fscriptisto","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Figor-petruk%2Fscriptisto/lists"}