{"id":13622152,"url":"https://github.com/k8snetworkplumbingwg/multus-cni","last_synced_at":"2026-02-18T19:09:01.876Z","repository":{"id":37341513,"uuid":"76367175","full_name":"k8snetworkplumbingwg/multus-cni","owner":"k8snetworkplumbingwg","description":"A CNI meta-plugin for multi-homed pods in Kubernetes","archived":false,"fork":false,"pushed_at":"2025-12-24T08:55:51.000Z","size":58863,"stargazers_count":2762,"open_issues_count":21,"forks_count":632,"subscribers_count":62,"default_branch":"master","last_synced_at":"2026-01-11T13:41:39.142Z","etag":null,"topics":["cni","cni-plugin","containerized-vnf","controlplane","dataplane","kubernetes","kubernetes-networking","multiple-network","vnf"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/k8snetworkplumbingwg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-12-13T14:40:51.000Z","updated_at":"2026-01-09T08:52:47.000Z","dependencies_parsed_at":"2023-02-12T18:15:39.762Z","dependency_job_id":"d6649f33-e149-4526-bc72-50be9cdfad54","html_url":"https://github.com/k8snetworkplumbingwg/multus-cni","commit_stats":{"total_commits":696,"total_committers":103,"mean_commits":6.757281553398058,"dds":0.6709770114942528,"last_synced_commit":"9f5c0239a804a90bf8913c9a386ca50eff9ce0cc"},"previous_names":["intel/multus-cni"],"tags_count":35,"template":false,"template_full_name":null,"purl":"pkg:github/k8snetworkplumbingwg/multus-cni","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8snetworkplumbingwg%2Fmultus-cni","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8snetworkplumbingwg%2Fmultus-cni/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8snetworkplumbingwg%2Fmultus-cni/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8snetworkplumbingwg%2Fmultus-cni/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/k8snetworkplumbingwg","download_url":"https://codeload.github.com/k8snetworkplumbingwg/multus-cni/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/k8snetworkplumbingwg%2Fmultus-cni/sbom","scorecard":{"id":490764,"data":{"date":"2025-08-11","repo":{"name":"github.com/k8snetworkplumbingwg/multus-cni","commit":"00adf22482945de41ff702258593aaf867a48e2d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.1,"checks":[{"name":"Maintained","score":3,"reason":"4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:17","Warn: no topLevel permission defined: .github/workflows/build.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Warn: no topLevel permission defined: .github/workflows/image-build.yml:1","Warn: no topLevel permission defined: .github/workflows/image-push-master.yml:1","Warn: no topLevel permission defined: .github/workflows/image-push-release.yml:1","Warn: no topLevel permission defined: .github/workflows/kind-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale-issues-prs.yml:1","Warn: no topLevel permission defined: .github/workflows/test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v4.2.2 not signed: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/234875731","Warn: release artifact v4.2.1 not signed: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/223382951","Warn: release artifact v4.2.0 not signed: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/207934416","Warn: release artifact v4.1.4 not signed: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/189494508","Warn: release artifact v4.1.3 not signed: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/180054962","Warn: release artifact v4.2.2 does not have provenance: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/234875731","Warn: release artifact v4.2.1 does not have provenance: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/223382951","Warn: release artifact v4.2.0 does not have provenance: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/207934416","Warn: release artifact v4.1.4 does not have provenance: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/189494508","Warn: release artifact v4.1.3 does not have provenance: https://api.github.com/repos/k8snetworkplumbingwg/multus-cni/releases/180054962"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'","Warn: branch protection not enabled for branch 'release-v3'","Warn: branch protection not enabled for branch 'v3.3-tp'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/image-build.yml:4"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/codeql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/codeql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/codeql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/codeql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-build.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-build.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-build.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-build.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-build.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-build.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-build.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-master.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-master.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-push-release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/image-push-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kind-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/kind-e2e.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/kind-e2e.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/kind-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kind-e2e.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/kind-e2e.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/kind-e2e.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/kind-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kind-e2e.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/kind-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale-issues-prs.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/stale-issues-prs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/k8snetworkplumbingwg/multus-cni/test.yml/master?enable=pin","Warn: containerImage not pinned by hash: images/Dockerfile:2","Warn: containerImage not pinned by hash: images/Dockerfile:11: pin your Docker image by updating gcr.io/distroless/base-debian12:latest to gcr.io/distroless/base-debian12:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: images/Dockerfile.debug:2","Warn: containerImage not pinned by hash: images/Dockerfile.debug:11: pin your Docker image by updating gcr.io/distroless/base-debian12:debug to gcr.io/distroless/base-debian12:debug@sha256:ca0a94ba0bc58d9f3a07eedef975b57b29e6c851740de214279217a14ecc8b4b","Warn: containerImage not pinned by hash: images/Dockerfile.openshift:3","Warn: containerImage not pinned by hash: images/Dockerfile.openshift:11: pin your Docker image by updating quay.io/openshift/origin-base:latest to quay.io/openshift/origin-base:latest@sha256:4d85103cd53505617be93e18a63701f80bf3ff661d415bc75026f8cac8bcadd5","Warn: containerImage not pinned by hash: images/Dockerfile.thick:2","Warn: containerImage not pinned by hash: images/Dockerfile.thick:11: pin your Docker image by updating debian:stable-slim to debian:stable-slim@sha256:8810492a2dd16b7f59239c1e0cc1e56c1a1a5957d11f639776bd6798e795608b","Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  29 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned","Info:   0 out of   8 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 28 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T19:04:28.190Z","repository_id":37341513,"created_at":"2025-08-19T19:04:28.190Z","updated_at":"2025-08-19T19:04:28.190Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28331257,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-12T00:36:25.062Z","status":"ssl_error","status_checked_at":"2026-01-12T00:36:15.229Z","response_time":60,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cni","cni-plugin","containerized-vnf","controlplane","dataplane","kubernetes","kubernetes-networking","multiple-network","vnf"],"created_at":"2024-08-01T21:01:14.903Z","updated_at":"2026-01-12T01:51:26.087Z","avatar_url":"https://github.com/k8snetworkplumbingwg.png","language":"Go","funding_links":[],"categories":["kubernetes","Go","Networking \u0026 Connectivity"],"sub_categories":[],"readme":"# Multus-CNI\n\n![multus-cni Logo](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/docs/images/Multus.png)\n\n[![Build](https://github.com/k8snetworkplumbingwg/multus-cni/actions/workflows/build.yml/badge.svg)](https://github.com/k8snetworkplumbingwg/multus-cni/actions/workflows/build.yml)[![Test](https://github.com/k8snetworkplumbingwg/multus-cni/actions/workflows/test.yml/badge.svg)](https://github.com/k8snetworkplumbingwg/multus-cni/actions/workflows/test.yml)[![Go Report Card](https://goreportcard.com/badge/github.com/k8snetworkplumbingwg/multus-cni)](https://goreportcard.com/report/github.com/k8snetworkplumbingwg/multus-cni)[![Coverage Status](https://coveralls.io/repos/github/k8snetworkplumbingwg/multus-cni/badge.svg)](https://coveralls.io/github/k8snetworkplumbingwg/multus-cni)\n\nMultus CNI enables attaching multiple network interfaces to pods in Kubernetes.\n\n## How it works\n\nMultus CNI is a container network interface (CNI) plugin for Kubernetes that enables attaching multiple network interfaces to pods. Typically, in Kubernetes each pod only has one network interface (apart from a loopback) -- with Multus you can create a multi-homed pod that has multiple interfaces. This is accomplished by Multus acting as a \"meta-plugin\", a CNI plugin that can call multiple other CNI plugins.\n\nMultus CNI follows the [Kubernetes Network Custom Resource Definition De-facto Standard](https://docs.google.com/document/d/1Ny03h6IDVy_e_vmElOqR7UdTPAG_RNydhVE1Kx54kFQ/edit) to provide a standardized method by which to specify the configurations for additional network interfaces. This standard is put forward by the Kubernetes [Network Plumbing Working Group](https://docs.google.com/document/d/1oE93V3SgOGWJ4O1zeD1UmpeToa0ZiiO6LqRAmZBPFWM/edit).\n\nMultus is one of the projects in the [Baremetal Container Experience kit](https://networkbuilders.intel.com/network-technologies/container-experience-kits)\n\n### Multi-Homed pod\n\nHere's an illustration of the network interfaces attached to a pod, as provisioned by Multus CNI. The diagram shows the pod with three interfaces: `eth0`, `net0` and `net1`. `eth0` connects kubernetes cluster network to connect with kubernetes server/services (e.g. kubernetes api-server, kubelet and so on). `net0` and `net1` are additional network attachments and connect to other networks by using [other CNI plugins](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/) (e.g. vlan/vxlan/ptp).\n\n![multus-pod-image](docs/images/multus-pod-image.svg)\n\n## Quickstart Installation Guide\n\nThe quickstart installation method for Multus requires that you have first installed a Kubernetes CNI plugin to serve as your pod-to-pod network, which we refer to as your \"default network\" (a network interface that every pod will be created with). Each network attachment created by Multus will be in addition to this default network interface. For more detail on installing a default network CNI plugin, refer to our [quick-start guide](docs/quickstart.md).\n\nTo use latest features try command below which applies a daemonset and installs thick Multus using `kubectl`:\n\n```\nkubectl apply -f https://raw.githubusercontent.com/k8snetworkplumbingwg/multus-cni/master/deployments/multus-daemonset-thick.yml\n```\n\nThis will configure your systems to be ready to use Multus CNI, but, to get started with adding additional interfaces to your pods, refer to our complete [quick-start guide](docs/quickstart.md)\n\n## Thin Plugin v.s Thick Plugin\n\nWith the multus 4.0 release, we introduce a new client/server-style plugin deployment. This new deployment is called ['thick plugin'](docs/thick-plugin.md), in contrast to deployments in previous versions, which is now called a 'thin plugin'. The new thick plugin consists of two binaries, multus-daemon and multus-shim CNI plugin. The 'multus-daemon' will be deployed to all nodes as a local agent and supports additional features, such as metrics, which were not available with the 'thin plugin' deployment before. Due to these additional features, the 'thick plugin' comes with the trade-off of consuming more resources than the 'thin plugin'.\n\nWe recommend using the thick plugin in most environments, but if you wish to run the thin plugin, or are in a resource-constrained environment, you may do so with:\n\n```\nkubectl apply -f https://raw.githubusercontent.com/k8snetworkplumbingwg/multus-cni/master/deployments/multus-daemonset.yml\n```\n\n## Additional Installation Options\n\nIn addition to the [quick-start guide](docs/quickstart.md), you may:\n\n- Download binaries from [release page](https://github.com/k8snetworkplumbingwg/multus-cni/releases)\n- By Docker image from [GitHub Container Registry](https://github.com/orgs/k8snetworkplumbingwg/packages/container/package/multus-cni)\n- Or, roll-your-own and build from source\n  - See [Development](docs/development.md)\n\n## Comprehensive Documentation\n\n- [How to use](docs/how-to-use.md)\n- [Quick Start Guide](docs/quickstart.md)\n- [Configuration](docs/configuration.md)\n- [Development and Support Information](docs/development.md)\n- [Thick Plugin](docs/thick-plugin.md)\n\n## Contact Us\n\nFor any questions about Multus CNI, open up a GitHub issue or feel free to ask a question in #general in the [NPWG Slack](https://npwg-team.slack.com/).\n\nTo be invited, use [this slack invite link](https://join.slack.com/t/npwg-team/shared_invite/zt-1u2vmsn2b-tKdOokdPY73zn9B32JoAOg).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fk8snetworkplumbingwg%2Fmultus-cni","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fk8snetworkplumbingwg%2Fmultus-cni","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fk8snetworkplumbingwg%2Fmultus-cni/lists"}