{"id":13401908,"url":"https://github.com/meshery/meshery","last_synced_at":"2026-04-07T22:01:19.429Z","repository":{"id":37028993,"uuid":"157554479","full_name":"meshery/meshery","owner":"meshery","description":"Meshery, the cloud native manager","archived":false,"fork":false,"pushed_at":"2026-04-01T00:30:39.000Z","size":1320084,"stargazers_count":10134,"open_issues_count":1226,"forks_count":3203,"subscribers_count":58,"default_branch":"master","last_synced_at":"2026-04-01T01:29:08.877Z","etag":null,"topics":["cloud-native","cncf","control-plane","docker","gitops","golang","gsoc","hacktoberfest","infrastructure-as-code","internal-developer-platform","kanvas","kubernetes","kubernetes-operator","management-plane","meshery","opa","platform-engineering","reactjs","visualization","webassembly"],"latest_commit_sha":null,"homepage":"https://meshery.io","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/meshery.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY-INSIGHTS.yml","support":null,"governance":"GOVERNANCE.md","roadmap":"ROADMAP.md","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2018-11-14T13:41:00.000Z","updated_at":"2026-04-01T00:08:37.000Z","dependencies_parsed_at":"2023-12-18T23:24:39.603Z","dependency_job_id":"6b12b936-bb2a-428b-8f2a-f20baaad1d29","html_url":"https://github.com/meshery/meshery","commit_stats":{"total_commits":23077,"total_committers":847,"mean_commits":"27.245572609208974","dds":0.7977640074533086,"last_synced_commit":"f9f6381d89e9a73be7bd90daa80503adea8a839b"},"previous_names":["layer5io/meshery"],"tags_count":788,"template":false,"template_full_name":null,"purl":"pkg:github/meshery/meshery","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meshery%2Fmeshery","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meshery%2Fmeshery/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meshery%2Fmeshery/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meshery%2Fmeshery/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meshery","download_url":"https://codeload.github.com/meshery/meshery/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meshery%2Fmeshery/sbom","scorecard":{"id":220599,"data":{"date":"2025-08-14T15:49:08Z","repo":{"name":"github.com/meshery/meshery","commit":"5c2649e77e74634a21013562b82abd77ebfbc228"},"scorecard":{"version":"v5.1.1","commit":"cd152cb6742c5b8f2f3d2b5193b41d9c50905198"},"score":5.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout '${{ github.event_name == 'pull_request_target' \u0026\u0026 github.event.pull_request.head.sha || '' }}': .github/workflows/build-ui-and-server.yml:29","Warn: untrusted code checkout '${{ github.event_name == 'pull_request_target' \u0026\u0026 github.event.pull_request.head.sha || '' }}': .github/workflows/build-ui-and-server.yml:62"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/regal-lint.yml:12","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/vex.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/bom.yaml:7","Warn: topLevel 'actions' permission set to 'write': .github/workflows/bom.yaml:8","Warn: no topLevel permission defined: .github/workflows/build-and-preview-site.yml:1","Warn: no topLevel permission defined: .github/workflows/build-and-release-ctl.yml:1","Warn: no topLevel permission defined: .github/workflows/build-and-release-dde.yml:1","Warn: no topLevel permission defined: .github/workflows/build-and-release-edge.yml:1","Warn: no topLevel permission defined: .github/workflows/build-and-release-stable.yml:1","Warn: no topLevel permission defined: .github/workflows/build-release.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/build-ui-and-server.yml:21","Warn: no topLevel permission defined: .github/workflows/build-ui-server-reusable-workflow.yml:1","Warn: no topLevel permission defined: .github/workflows/cncf-playground-deploy-meshery.yaml:1","Warn: no topLevel permission defined: .github/workflows/cncf-playground-reset.yaml:1","Warn: no topLevel permission defined: .github/workflows/cncf-staging-playground-deploy-meshery.yaml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/comment-e2e-test.yml:9","Warn: topLevel 'contents' permission set to 'write': .github/workflows/discussions-data-files-update.yml:9","Warn: no topLevel permission defined: .github/workflows/e2etest.yaml:1","Warn: no topLevel permission defined: .github/workflows/email-test.yml:1","Warn: no topLevel permission defined: .github/workflows/error-codes-updater.yaml:1","Warn: no topLevel permission defined: .github/workflows/eslint-gh.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/first-time-contributor.yml:9","Warn: topLevel 'contents' permission set to 'write': .github/workflows/generate_keys.yml:13","Warn: no topLevel permission defined: .github/workflows/go-mod-sync.yaml:1","Warn: no topLevel permission defined: .github/workflows/go-testing-ci.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/graphql.yml:10","Warn: no topLevel permission defined: .github/workflows/helm-chart-releaser.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/image-scan.yml:24","Warn: no topLevel permission defined: .github/workflows/integrations-updater.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/invitations.yml:8","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/kanvas.yml:20","Info: topLevel 'actions' permission set to 'read': .github/workflows/kanvas.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/kanvas.yml:18","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/kanvas.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/label-commenter.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/labeler.yml:6","Warn: no topLevel permission defined: .github/workflows/mesheryctl-ci.yml:1","Warn: no topLevel permission defined: .github/workflows/mesheryctl-e2e.yaml:1","Warn: no topLevel permission defined: .github/workflows/model-generator.yml:1","Warn: no topLevel permission defined: .github/workflows/multi-platform.yml:1","Warn: no topLevel permission defined: .github/workflows/notify-providers.yaml:1","Warn: no topLevel permission defined: .github/workflows/osps-baseline.yml:1","Warn: no topLevel permission defined: .github/workflows/preview-site.yml:1","Warn: no topLevel permission defined: .github/workflows/redocly.yml:1","Warn: no topLevel permission defined: .github/workflows/regal-lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-drafter.yml:12","Warn: no topLevel permission defined: .github/workflows/release-notes.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18","Warn: no topLevel permission defined: .github/workflows/server-integration-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/slack.yml:1","Warn: no topLevel permission defined: .github/workflows/swagger.yml:1","Warn: no topLevel permission defined: .github/workflows/test_adapters.yaml:1","Warn: no topLevel permission defined: .github/workflows/test_adaptersv2.yaml:1","Info: topLevel 'actions' permission set to 'read': .github/workflows/update-jekyll-e2e-tests-results.yml:9","Warn: topLevel 'contents' permission set to 'write': .github/workflows/update-jekyll-e2e-tests-results.yml:10","Warn: no topLevel permission defined: .github/workflows/update-script-in-vm.yaml:1","Warn: no topLevel permission defined: .github/workflows/vex.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#license"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#dependency-update-tool"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.8.128 not signed: https://api.github.com/repos/meshery/meshery/releases/238776380","Warn: release artifact v0.8.127 not signed: https://api.github.com/repos/meshery/meshery/releases/237545219","Warn: release artifact v0.8.126 not signed: https://api.github.com/repos/meshery/meshery/releases/237499852","Warn: release artifact v0.8.124 not signed: https://api.github.com/repos/meshery/meshery/releases/235524719","Warn: release artifact v0.8.128 does not have provenance: https://api.github.com/repos/meshery/meshery/releases/238776380","Warn: release artifact v0.8.127 does not have provenance: https://api.github.com/repos/meshery/meshery/releases/237545219","Warn: release artifact v0.8.126 does not have provenance: https://api.github.com/repos/meshery/meshery/releases/237499852","Warn: release artifact v0.8.124 does not have provenance: https://api.github.com/repos/meshery/meshery/releases/235524719"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: ui/public/static/namespace_discovery_relationship_policy.wasm:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-and-release-edge.yml:100"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-preview-site.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-preview-site.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-preview-site.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-preview-site.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-preview-site.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-preview-site.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-ctl.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-ctl.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-ctl.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-ctl.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-ctl.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-ctl.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-ctl.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-ctl.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-dde.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-dde.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-dde.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-dde.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-dde.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-dde.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-dde.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-dde.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-dde.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-dde.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-dde.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-dde.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-edge.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-edge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-release-stable.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-and-release-stable.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:220: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-ui-and-server.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-and-server.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-server-reusable-workflow.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-server-reusable-workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-server-reusable-workflow.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-server-reusable-workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-server-reusable-workflow.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-server-reusable-workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-server-reusable-workflow.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-server-reusable-workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-server-reusable-workflow.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-server-reusable-workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-server-reusable-workflow.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-server-reusable-workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-ui-server-reusable-workflow.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/build-ui-server-reusable-workflow.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cncf-playground-deploy-meshery.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/cncf-playground-deploy-meshery.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cncf-playground-reset.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/cncf-playground-reset.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cncf-staging-playground-deploy-meshery.yaml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/cncf-staging-playground-deploy-meshery.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/discussions-data-files-update.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/discussions-data-files-update.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/discussions-data-files-update.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/discussions-data-files-update.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2etest.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/e2etest.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2etest.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/e2etest.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/error-codes-updater.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/error-codes-updater.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/error-codes-updater.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/error-codes-updater.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/error-codes-updater.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/error-codes-updater.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/error-codes-updater.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/error-codes-updater.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/eslint-gh.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/eslint-gh.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/first-time-contributor.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/first-time-contributor.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/first-time-contributor.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/first-time-contributor.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate_keys.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/generate_keys.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate_keys.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/generate_keys.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate_keys.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/generate_keys.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate_keys.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/generate_keys.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-sync.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-mod-sync.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-sync.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-mod-sync.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-sync.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-mod-sync.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-mod-sync.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-mod-sync.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-mod-sync.yaml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-mod-sync.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-testing-ci.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/go-testing-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/graphql.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/graphql.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/graphql.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/graphql.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/graphql.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/graphql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-chart-releaser.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/helm-chart-releaser.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/helm-chart-releaser.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/helm-chart-releaser.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-chart-releaser.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/helm-chart-releaser.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/helm-chart-releaser.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/helm-chart-releaser.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/helm-chart-releaser.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/helm-chart-releaser.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-scan.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/image-scan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/image-scan.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/image-scan.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-scan.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/image-scan.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integrations-updater.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/integrations-updater.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/invitations.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/invitations.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/invitations.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/invitations.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/invitations.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/invitations.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kanvas.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/kanvas.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kanvas.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/kanvas.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/kanvas.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/kanvas.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/label-commenter.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/label-commenter.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/label-commenter.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/label-commenter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/labeler.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mesheryctl-ci.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mesheryctl-ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-ci.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mesheryctl-e2e.yaml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/mesheryctl-e2e.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/model-generator.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/model-generator.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/model-generator.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/model-generator.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/model-generator.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/model-generator.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/model-generator.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/model-generator.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/model-generator.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/model-generator.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/model-generator.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/model-generator.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/multi-platform.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/multi-platform.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/multi-platform.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/multi-platform.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/multi-platform.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/multi-platform.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/multi-platform.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/multi-platform.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/multi-platform.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/multi-platform.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/multi-platform.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/multi-platform.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-providers.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/notify-providers.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-providers.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/notify-providers.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/osps-baseline.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/osps-baseline.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/preview-site.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/preview-site.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/preview-site.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/preview-site.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/preview-site.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/preview-site.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/redocly.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/redocly.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/redocly.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/redocly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/redocly.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/redocly.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/redocly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/redocly.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/regal-lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/regal-lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/regal-lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/regal-lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/regal-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/regal-lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/regal-lint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/regal-lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-drafter.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/release-drafter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-notes.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/release-notes.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-notes.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/release-notes.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/scorecard.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/server-integration-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/server-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/server-integration-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/server-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/server-integration-tests.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/server-integration-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/slack.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/slack.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/slack.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/slack.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swagger.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/swagger.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/swagger.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/swagger.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/swagger.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/swagger.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_adapters.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adapters.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_adapters.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adapters.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_adapters.yaml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adapters.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_adapters.yaml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adapters.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_adaptersv2.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adaptersv2.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_adaptersv2.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adaptersv2.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_adaptersv2.yaml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adaptersv2.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_adaptersv2.yaml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/test_adaptersv2.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-jekyll-e2e-tests-results.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/update-jekyll-e2e-tests-results.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-jekyll-e2e-tests-results.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/update-jekyll-e2e-tests-results.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-script-in-vm.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/update-script-in-vm.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vex.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/vex.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vex.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/vex.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vex.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/meshery/meshery/vex.yaml/master?enable=pin","Warn: containerImage not pinned by hash: .github/actions/comment-preview-on-pr/Dockerfile:1: pin your Docker image by updating python:3.7 to python:3.7@sha256:eedf63967cdb57d8214db38ce21f105003ed4e4d0358f02bedc057341bcf92a0","Warn: containerImage not pinned by hash: docs/Dockerfile:1: pin your Docker image by updating jekyll/jekyll:4.0 to jekyll/jekyll:4.0@sha256:400b8d1569f118bca8a3a09a25f32803b00a55d1ea241feaf5f904d66ca9c625","Warn: containerImage not pinned by hash: install/docker-extension/Dockerfile:1","Warn: containerImage not pinned by hash: install/docker-extension/Dockerfile:15","Warn: containerImage not pinned by hash: install/docker-extension/Dockerfile:26: pin your Docker image by updating alpine to alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: install/docker/Dockerfile:1","Warn: containerImage not pinned by hash: install/docker/Dockerfile:12","Warn: containerImage not pinned by hash: install/docker/Dockerfile:15","Warn: containerImage not pinned by hash: install/docker/Dockerfile:22","Warn: containerImage not pinned by hash: install/docker/Dockerfile:29","Warn: containerImage not pinned by hash: install/docker/Dockerfile:37","Warn: containerImage not pinned by hash: install/docker/Dockerfile:52","Warn: containerImage not pinned by hash: install/docker/Dockerfile:78: pin your Docker image by updating alpine:3.21.3 to alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:1","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:13","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:15","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:23","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:35","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:42","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:55","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:57","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:64","Warn: containerImage not pinned by hash: install/docker/testing/Dockerfile:101","Warn: containerImage not pinned by hash: install/meshery-milestone/Dockerfile:1: pin your Docker image by updating nginx:latest to nginx:latest@sha256:33e0bbc7ca9ecf108140af6288c7c9d1ecc77548cbfd3952fd8466a75edefe57","Warn: pipCommand not pinned by hash: .github/actions/comment-preview-on-pr/Dockerfile:3","Warn: downloadThenRun not pinned by hash: mesheryctl/tests/e2e/setup_suite.bash:7","Warn: goCommand not pinned by hash: .github/workflows/error-codes-updater.yaml:38","Warn: npmCommand not pinned by hash: .github/workflows/eslint-gh.yml:15","Warn: npmCommand not pinned by hash: .github/workflows/eslint-gh.yml:17","Warn: npmCommand not pinned by hash: .github/workflows/redocly.yml:30","Warn: downloadThenRun not pinned by hash: .github/workflows/test_adapters.yaml:100","Warn: downloadThenRun not pinned by hash: .github/workflows/test_adaptersv2.yaml:119","Warn: downloadThenRun not pinned by hash: .github/workflows/vex.yaml:19","Info:  10 out of 111 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of 104 third-party GitHubAction dependencies pinned","Info:   0 out of  24 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned","Info:   5 out of   8 npmCommand dependencies pinned","Info:   0 out of   4 downloadThenRun dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#pinned-dependencies"}},{"name":"CI-Tests","score":10,"reason":"14 out of 14 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 53 contributing companies or organizations","details":["Info: found contributions from: ALPHAVIO, Alphasians, EddieHubCommunity, EpicGames, EternisAI, GDSCITM, Jaidevstudio, MLH-Fellowship, NVIDIAGameWorks, OpenRefine, TEC-VIT, TemplateRun, aeraki-mesh, affirmed-octo, apache, api7, axro1, blevesearch, buildship + rowy, citi, cncf, codingjuniors, deislabs, devlup-labs, digitalocean, docker-captains, eternisai / @apache, fossasia, github-craftwork, hackstrap, ibm (@noobaa), iit bhu, indian institute of technology  jodhpur, istio, istio-up-and-running, k173-x, layer5, layer5io, meshery, meshery-extensions, mlcommons, noobaa, nsfw-filter, pda-mit, pes-innovation-lab, rowyio, safedep, sagacious-labs, service-mesh-patterns, service-mesh-performance, servicemeshinterface, signoz, vmware"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#contributors"}},{"name":"Vulnerabilities","score":0,"reason":"17 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: GO-2024-2920 / GHSA-2hmf-46v7-v6fx","Warn: Project is vulnerable to: GHSA-9h84-qmv7-982p","Warn: Project is vulnerable to: GHSA-f9f8-9pmf-xv68","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-c59h-r6p8-q9wc","Warn: Project is vulnerable to: GHSA-g77x-44xx-532m","Warn: Project is vulnerable to: GHSA-7gfc-8cq8-jh5f","Warn: Project is vulnerable to: GHSA-qpjv-v59x-3qc4","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6","Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:23:20.273Z","repository_id":37028993,"created_at":"2025-08-17T02:23:20.274Z","updated_at":"2025-08-17T02:23:20.274Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31530647,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-07T16:28:08.000Z","status":"ssl_error","status_checked_at":"2026-04-07T16:28:06.951Z","response_time":105,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cloud-native","cncf","control-plane","docker","gitops","golang","gsoc","hacktoberfest","infrastructure-as-code","internal-developer-platform","kanvas","kubernetes","kubernetes-operator","management-plane","meshery","opa","platform-engineering","reactjs","visualization","webassembly"],"created_at":"2024-07-30T19:01:09.029Z","updated_at":"2026-04-07T22:01:19.387Z","avatar_url":"https://github.com/meshery.png","language":"Go","funding_links":[],"categories":["JavaScript","Go","Tools and Libraries","HarmonyOS","Repos","Continuous Delivery \u0026 GitOps","K8S-Tools","golang","Ecosystem Projects","语音识别与合成_其他","webassembly","Container","TypeScript","HTML","docker","☁️ Cloud Platforms \u0026 Infrastructure","Configuration Management","🚀 DevOps \u0026 Infrastructure"],"sub_categories":["Cluster Resources Management","Windows Manager","资源传输下载","Tools"],"readme":null,"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmeshery%2Fmeshery","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmeshery%2Fmeshery","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmeshery%2Fmeshery/lists"}