{"id":37206807,"url":"https://github.com/pixel365/bx","last_synced_at":"2026-01-22T13:42:19.093Z","repository":{"id":277326332,"uuid":"921790734","full_name":"pixel365/bx","owner":"pixel365","description":"Command-line tool for developers of 1C-Bitrix platform modules.","archived":false,"fork":false,"pushed_at":"2026-01-12T07:18:17.000Z","size":781,"stargazers_count":4,"open_issues_count":3,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-01-15T03:42:30.780Z","etag":null,"topics":["1c-bitrix","bitrix","bitrix-module","build-tool","cli"],"latest_commit_sha":null,"homepage":"https://pixel365.github.io/bx/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pixel365.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-01-24T16:13:40.000Z","updated_at":"2025-12-16T14:01:29.000Z","dependencies_parsed_at":"2025-03-17T08:32:07.090Z","dependency_job_id":"1e6cce05-bfaf-4818-8301-581bc775013c","html_url":"https://github.com/pixel365/bx","commit_stats":null,"previous_names":["pixel365/bx"],"tags_count":27,"template":false,"template_full_name":null,"purl":"pkg:github/pixel365/bx","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pixel365%2Fbx","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pixel365%2Fbx/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pixel365%2Fbx/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pixel365%2Fbx/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pixel365","download_url":"https://codeload.github.com/pixel365/bx/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pixel365%2Fbx/sbom","scorecard":{"id":1238538,"data":{"date":"2025-10-06T06:26:22Z","repo":{"name":"github.com/pixel365/bx","commit":"6291c85de17e0021cdcdd815658db9a1b2e10ad7"},"scorecard":{"version":"v5.1.1","commit":"cd152cb6742c5b8f2f3d2b5193b41d9c50905198"},"score":7.2,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":0,"reason":"Found 0/8 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#maintained"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#dependency-update-tool"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":9,"reason":"dependency not pinned by hash detected -- score normalized to 9","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/pixel365/bx/scorecard.yml/main?enable=pin","Info:  12 out of  13 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:15","Info: topLevel 'contents' permission set to 'read': .github/workflows/go-linter.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/go.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/gosec.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/slsa.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/test.yml:4"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#sast"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":4,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Info: signed release artifact: bx_1.5.8_checksums.txt.sig: https://github.com/pixel365/bx/releases/tag/v1.5.8","Info: signed release artifact: bx_1.5.7_checksums.txt.sig: https://github.com/pixel365/bx/releases/tag/v1.5.7","Info: signed release artifact: bx_1.5.6_checksums.txt.sig: https://github.com/pixel365/bx/releases/tag/v1.5.6","Warn: release artifact v1.5.5 not signed: https://api.github.com/repos/pixel365/bx/releases/220854628","Warn: release artifact v1.5.4 not signed: https://api.github.com/repos/pixel365/bx/releases/220104697","Warn: release artifact v1.5.8 does not have provenance: https://api.github.com/repos/pixel365/bx/releases/244729473","Warn: release artifact v1.5.7 does not have provenance: https://api.github.com/repos/pixel365/bx/releases/232466506","Warn: release artifact v1.5.6 does not have provenance: https://api.github.com/repos/pixel365/bx/releases/220946898","Warn: release artifact v1.5.5 does not have provenance: https://api.github.com/repos/pixel365/bx/releases/220854628","Warn: release artifact v1.5.4 does not have provenance: https://api.github.com/repos/pixel365/bx/releases/220104697"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#branch-protection"}},{"name":"Contributors","score":3,"reason":"project has 1 contributing companies or organizations -- score normalized to 3","details":["Info: found contributions from: freelance"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"9 out of 9 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-10-06T08:40:57.898Z","repository_id":277326332,"created_at":"2025-10-06T08:40:57.898Z","updated_at":"2025-10-06T08:40:57.898Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28663856,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-22T01:17:37.254Z","status":"online","status_checked_at":"2026-01-22T02:00:07.137Z","response_time":144,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["1c-bitrix","bitrix","bitrix-module","build-tool","cli"],"created_at":"2026-01-14T23:48:05.370Z","updated_at":"2026-01-22T13:42:19.068Z","avatar_url":"https://github.com/pixel365.png","language":"Go","readme":"# BX - Command-Line Tool for 1C-Bitrix Module Development\n\nBX is a command-line tool for developers working on 1C-Bitrix platform modules. It allows you to declaratively define all stages of project build, as well as validate the module configuration and deploy the final distribution. Build configurations are versioned alongside the project, ensuring consistency and traceability of changes throughout the development process.\n\n📘 **Documentation**: [https://pixel365.github.io/bx](https://pixel365.github.io/bx)\n\n![Go Version](https://img.shields.io/badge/go-1.24+-brightgreen)\n[![Go Report Card](https://goreportcard.com/badge/github.com/pixel365/bx)](https://goreportcard.com/report/github.com/pixel365/bx)\n[![PkgGoDev](https://pkg.go.dev/badge/github.com/pixel365/bx)](https://pkg.go.dev/github.com/pixel365/bx)\n[![Coverage](https://codecov.io/gh/pixel365/bx/branch/main/graph/badge.svg)](https://codecov.io/gh/pixel365/bx)\n[![OpenSSF](https://api.securityscorecards.dev/projects/github.com/pixel365/bx/badge)](https://securityscorecards.dev/viewer/?uri=github.com/pixel365/bx)\n[![Release](https://img.shields.io/github/v/release/pixel365/bx)](https://github.com/pixel365/bx/releases)\n![License](https://img.shields.io/github/license/pixel365/bx)\n\n\n---\n\n## 🤝 Contributing\n\nContributions to **BX** are welcome and appreciated.\n\nIf you would like to report an issue, suggest an enhancement, or contribute code, please first review our [contribution guidelines](https://github.com/pixel365/bx/blob/main/CONTRIBUTING.md).\n\nTo contribute:\n\n1. Fork the repository and create a feature branch.\n2. Make your changes, ensuring code quality, test coverage, and documentation.\n3. Run `make` to verify formatting, linting, and checks.\n4. Submit a pull request with a clear summary and reference to any related issues.\n\nAll contributions are subject to review and must pass CI checks before being merged.\n\n[Open an issue](https://github.com/pixel365/bx/issues) or start a pull request to get involved 🚀\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpixel365%2Fbx","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpixel365%2Fbx","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpixel365%2Fbx/lists"}