{"id":27167271,"url":"https://github.com/lfreleng-actions/test-python-project","last_synced_at":"2025-09-01T01:33:35.478Z","repository":{"id":282265185,"uuid":"947956460","full_name":"lfreleng-actions/test-python-project","owner":"lfreleng-actions","description":"Sample Python project used for testing actions","archived":false,"fork":false,"pushed_at":"2025-08-25T18:14:08.000Z","size":313,"stargazers_count":0,"open_issues_count":5,"forks_count":2,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-08-25T20:25:21.188Z","etag":null,"topics":["example","package","python","test","testing"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lfreleng-actions.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-03-13T14:13:29.000Z","updated_at":"2025-08-20T23:27:42.000Z","dependencies_parsed_at":"2025-03-13T17:34:03.446Z","dependency_job_id":"2a668f93-eb31-4be9-97ee-7218428a6a5c","html_url":"https://github.com/lfreleng-actions/test-python-project","commit_stats":null,"previous_names":["lfreleng-actions/test-python-project"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/lfreleng-actions/test-python-project","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Ftest-python-project","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Ftest-python-project/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Ftest-python-project/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Ftest-python-project/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lfreleng-actions","download_url":"https://codeload.github.com/lfreleng-actions/test-python-project/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Ftest-python-project/sbom","scorecard":{"id":926017,"data":{"date":"2025-08-24T04:53:27Z","repo":{"name":"github.com/lfreleng-actions/test-python-project","commit":"fcbe1565472ae5a4182b414353be1ff98711c075"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.3,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:  14 out of  14 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-test.yaml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-test.yaml:76","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-test.yaml:113","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/codeql.yml:30","Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql.yml:32","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:35","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/dependencies.yaml:36","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/openssf-scorecard.yaml:28","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-drafter.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semantic-pull-request.yaml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/sha-pinned-actions.yaml:29","Info: found token with 'none' permissions: .github/workflows/build-test.yaml:1","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: found token with 'none' permissions: .github/workflows/dependencies.yaml:1","Info: found token with 'none' permissions: .github/workflows/openssf-scorecard.yaml:1","Warn: no topLevel permission defined: .github/workflows/release-drafter.yaml:1","Info: found token with 'none' permissions: .github/workflows/semantic-pull-request.yaml:1","Info: found token with 'none' permissions: .github/workflows/sha-pinned-actions.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":4,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":10,"reason":"project has 6 contributing companies or organizations","details":["Info: found contributions from: LF-Engineering, edgexfoundry, lfit, linux foundation modeseven, linuxfoundation, opendaylight"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-25T20:25:23.954Z","repository_id":282265185,"created_at":"2025-08-25T20:25:23.955Z","updated_at":"2025-08-25T20:25:23.955Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273064374,"owners_count":25039259,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-31T02:00:09.071Z","response_time":79,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["example","package","python","test","testing"],"created_at":"2025-04-09T04:51:29.122Z","updated_at":"2025-09-01T01:33:35.464Z","avatar_url":"https://github.com/lfreleng-actions.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Test Python Project\n\n\u003c!--\n# SPDX-License-Identifier: Apache-2.0\n# SPDX-FileCopyrightText: 2025 The Linux Foundation\n--\u003e\n\n\u003c!-- prettier-ignore-start --\u003e\n\u003c!-- markdownlint-disable-next-line MD013 --\u003e\n[![Linux Foundation](https://img.shields.io/badge/Linux-Foundation-blue)](https://linuxfoundation.org//) [![Source Code](https://img.shields.io/badge/GitHub-100000?logo=github\u0026logoColor=white\u0026color=blue)](https://github.com/lfreleng-actions/test-python-project) [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) [![pre-commit.ci status badge]][pre-commit.ci results page] [![PyPI](https://img.shields.io/pypi/v/lfreleng-test-python-project?logo=python\u0026logoColor=white\u0026color=blue)](https://pypi.org/project/lfreleng-test-python-project) [![🔐 CodeQL](https://github.com/lfreleng-actions/test-python-project/actions/workflows/codeql.yml/badge.svg)](https://github.com/lfreleng-actions/test-python-project/actions/workflows/codeql.yml) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/lfreleng-actions/test-python-project//badge)](https://scorecard.dev/viewer/?uri=github.com/lfreleng-actions/test-python-project/)\n\n[![testpypi](https://img.shields.io/pypi/v/lfreleng-test-python-project?logo=python\u0026label=testpypi\u0026logoColor=white\u0026color=32C955\u0026pypiBaseUrl=https://test.pypi.org)](https://test.pypi.org/project/lfreleng-test-python-project)\n\u003c!-- prettier-ignore-end --\u003e\n\nExample project used for testing Github actions that work with Python code.\n\nProject name: lfreleng-test-python-project\n\n## test-python-project\n\n\u003c!-- markdownlint-disable MD013 --\u003e\nContains a sample Python project implementing a CLI tool with [Typer](https://typer.tiangolo.com/).\n\u003c!-- markdownlint-enable MD013 --\u003e\n\n\u003c!--\n# The section below renders the badges displayed at the top of the page\n--\u003e\n\n##  Notes\n\nSteps required to initialise pyproject.toml and create initial lock file:\n\n```console\npdm init\npdm add -dG test pytest\npdm add -dG test coverage\npdm add -dG tox tox-pdm tox\npdm add -dG lint pre-commit\npdm add -dG docs sphinx\npdm add -dG docs sphinx-copybutton\npdm build\npdm install --dev\n```\n\n[pre-commit.ci results page]: https://results.pre-commit.ci/latest/github/lfreleng-actions/test-python-project/main\n[pre-commit.ci status badge]: https://results.pre-commit.ci/badge/github/lfreleng-actions/test-python-project/main.svg\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flfreleng-actions%2Ftest-python-project","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flfreleng-actions%2Ftest-python-project","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flfreleng-actions%2Ftest-python-project/lists"}