{"id":13489507,"url":"https://github.com/radius-project/radius","last_synced_at":"2026-05-20T01:11:25.977Z","repository":{"id":200563023,"uuid":"340522752","full_name":"radius-project/radius","owner":"radius-project","description":"Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps.","archived":false,"fork":false,"pushed_at":"2026-03-05T05:11:50.000Z","size":86565,"stargazers_count":1622,"open_issues_count":313,"forks_count":123,"subscribers_count":20,"default_branch":"main","last_synced_at":"2026-03-05T06:49:33.836Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://radapp.io","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/radius-project.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":"GOVERNANCE.md","roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-02-20T00:25:52.000Z","updated_at":"2026-03-05T05:11:52.000Z","dependencies_parsed_at":null,"dependency_job_id":"4a10b363-8a8c-48ca-9581-e75df43f498f","html_url":"https://github.com/radius-project/radius","commit_stats":null,"previous_names":["radius-project/radius","project-radius/radius","azure/radius"],"tags_count":161,"template":false,"template_full_name":null,"purl":"pkg:github/radius-project/radius","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/radius-project%2Fradius","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/radius-project%2Fradius/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/radius-project%2Fradius/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/radius-project%2Fradius/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/radius-project","download_url":"https://codeload.github.com/radius-project/radius/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/radius-project%2Fradius/sbom","scorecard":{"id":40864,"data":{"date":"2025-08-14T20:56:41Z","repo":{"name":"github.com/radius-project/radius","commit":"393e7cb19b4c5f0b6c3e08a308b017269f4a855a"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/devcontainer-feature-release.yaml:17","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/devcontainer-feature-release.yaml:19","Warn: topLevel 'contents' permission set to 'write': .github/workflows/build.yaml:35","Warn: topLevel 'checks' permission set to 'write': .github/workflows/build.yaml:37","Warn: topLevel 'packages' permission set to 'write': .github/workflows/build.yaml:39","Warn: no topLevel permission defined: .github/workflows/close-stale-prs.yml:1","Warn: no topLevel permission defined: .github/workflows/devcontainer-feature-release.yaml:1","Warn: no topLevel permission defined: .github/workflows/devcontainer-feature-test.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/functional-test-cloud.yaml:21","Warn: topLevel 'packages' permission set to 'write': .github/workflows/functional-test-cloud.yaml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/functional-test-cloud.yaml:23","Warn: topLevel 'packages' permission set to 'write': .github/workflows/functional-test-noncloud.yaml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/functional-test-noncloud.yaml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/functional-test-noncloud.yaml:21","Warn: no topLevel permission defined: .github/workflows/functional-tests-approval.yaml:1","Warn: no topLevel permission defined: .github/workflows/lint.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/long-running-azure.yaml:43","Warn: topLevel 'packages' permission set to 'write': .github/workflows/long-running-azure.yaml:44","Warn: no topLevel permission defined: .github/workflows/publish-docs.yaml:1","Warn: no topLevel permission defined: .github/workflows/purge-artifacts.yaml:1","Warn: no topLevel permission defined: .github/workflows/purge-aws-test-resources.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/purge-azure-test-resources.yaml:21","Warn: topLevel 'packages' permission set to 'write': .github/workflows/purge-azure-test-resources.yaml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/purge-old-images.yaml:5","Warn: topLevel 'packages' permission set to 'write': .github/workflows/purge-old-images.yaml:6","Warn: no topLevel permission defined: .github/workflows/radius-bot.yaml:1","Warn: no topLevel permission defined: .github/workflows/release-verification.yaml:1","Warn: topLevel 'packages' permission set to 'write': .github/workflows/release.yaml:35","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:37","Warn: no topLevel permission defined: .github/workflows/require-pr-checklist.yaml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yaml:30","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/triage-bot.yaml:22","Warn: no topLevel permission defined: .github/workflows/validate-devcontainer-feature.yaml:1","Warn: no topLevel permission defined: .github/workflows/validate-installers.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.49.0 not signed: https://api.github.com/repos/radius-project/radius/releases/233629317","Warn: release artifact v0.49.0-rc1 not signed: https://api.github.com/repos/radius-project/radius/releases/233400580","Warn: release artifact v0.48.0 not signed: https://api.github.com/repos/radius-project/radius/releases/228433036","Warn: release artifact v0.48.0-rc1 not signed: https://api.github.com/repos/radius-project/radius/releases/227140208","Warn: release artifact v0.47.0 not signed: https://api.github.com/repos/radius-project/radius/releases/220740005","Warn: release artifact v0.49.0 does not have provenance: https://api.github.com/repos/radius-project/radius/releases/233629317","Warn: release artifact v0.49.0-rc1 does not have provenance: https://api.github.com/repos/radius-project/radius/releases/233400580","Warn: release artifact v0.48.0 does not have provenance: https://api.github.com/repos/radius-project/radius/releases/228433036","Warn: release artifact v0.48.0-rc1 does not have provenance: https://api.github.com/repos/radius-project/radius/releases/227140208","Warn: release artifact v0.47.0 does not have provenance: https://api.github.com/repos/radius-project/radius/releases/220740005"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:267: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:317: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-stale-prs.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/close-stale-prs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devcontainer-feature-release.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/devcontainer-feature-release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/devcontainer-feature-release.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/devcontainer-feature-release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devcontainer-feature-test.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/devcontainer-feature-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devcontainer-feature-test.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/devcontainer-feature-test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/devops-boards.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/devops-boards.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/devops-boards.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/devops-boards.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:287: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:312: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:329: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:340: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:352: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:361: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:418: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:429: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:466: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:472: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:483: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:489: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:497: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:504: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:510: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:516: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:538: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:545: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:605: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:623: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:716: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:811: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:833: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:840: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:851: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:862: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:891: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:918: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-cloud.yaml:938: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-cloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:513: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:533: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:555: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-test-noncloud.yaml:569: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-test-noncloud.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/functional-tests-approval.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/functional-tests-approval.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/lint.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/lint.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/lint.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yaml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/lint.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/lint.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yaml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/lint.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/lint.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:382: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:388: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:399: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:405: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:431: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:520: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:556: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:638: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:652: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:667: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/long-running-azure.yaml:689: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/long-running-azure.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/publish-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/publish-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/publish-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/publish-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yaml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/publish-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/publish-docs.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docs.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/publish-docs.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/purge-artifacts.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-artifacts.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/purge-aws-test-resources.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-aws-test-resources.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/purge-aws-test-resources.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-aws-test-resources.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/purge-aws-test-resources.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-aws-test-resources.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/purge-azure-test-resources.yaml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-azure-test-resources.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/purge-azure-test-resources.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-azure-test-resources.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/purge-azure-test-resources.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-azure-test-resources.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/purge-old-images.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-old-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/purge-old-images.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/purge-old-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/radius-bot.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/radius-bot.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/radius-bot.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/radius-bot.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-verification.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release-verification.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-pr-checklist.yaml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/require-pr-checklist.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/triage-bot.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/triage-bot.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/triage-bot.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/triage-bot.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-bicep.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/validate-bicep.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-bicep.yaml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/validate-bicep.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-devcontainer-feature.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/validate-devcontainer-feature.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-devcontainer-feature.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/validate-devcontainer-feature.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-installers.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/radius-project/radius/validate-installers.yaml/main?enable=pin","Warn: containerImage not pinned by hash: deploy/images/applications-rp/Dockerfile:3: pin your Docker image by updating alpine:3.21.3 to alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c","Warn: containerImage not pinned by hash: deploy/images/applications-rp/Dockerfile.mariner:1: pin your Docker image by updating mcr.microsoft.com/cbl-mariner/base/core:2.0 to mcr.microsoft.com/cbl-mariner/base/core:2.0@sha256:dd99db6634c0bf41eee16e4a434da5cc874640e1765b7b1e26b8f7857df649c1","Warn: containerImage not pinned by hash: deploy/images/bicep/Dockerfile:1: pin your Docker image by updating alpine:3.21.3 to alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c","Warn: containerImage not pinned by hash: deploy/images/controller/Dockerfile:2: pin your Docker image by updating debian:bullseye-20250317-slim to debian:bullseye-20250317-slim@sha256:e4b93db6aad977a95aa103917f3de8a2b16ead91cf255c3ccdb300c5d20f3015","Warn: containerImage not pinned by hash: deploy/images/dynamic-rp/Dockerfile:3: pin your Docker image by updating alpine:3.20 to alpine:3.20@sha256:b3119ef930faabb6b7b976780c0c7a9c1aa24d0c75e9179ac10e6bc9ac080d0d","Warn: containerImage not pinned by hash: deploy/images/dynamic-rp/Dockerfile.mariner:1: pin your Docker image by updating mcr.microsoft.com/cbl-mariner/base/core:2.0 to mcr.microsoft.com/cbl-mariner/base/core:2.0@sha256:dd99db6634c0bf41eee16e4a434da5cc874640e1765b7b1e26b8f7857df649c1","Warn: containerImage not pinned by hash: deploy/images/pre-upgrade/Dockerfile:2: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: deploy/images/ucpd/Dockerfile:2: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: test/magpiego/Dockerfile:1: pin your Docker image by updating golang:1.22-alpine to golang:1.22-alpine@sha256:1699c10032ca2582ec89a24a1312d986a3f094aed3d5c1147b19880afe40e052","Warn: containerImage not pinned by hash: test/testrp/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: npmCommand not pinned by hash: .devcontainer/post-create.sh:6","Warn: downloadThenRun not pinned by hash: .devcontainer/post-create.sh:13","Warn: npmCommand not pinned by hash: .devcontainer/post-create.sh:22","Warn: npmCommand not pinned by hash: .devcontainer/post-create.sh:23","Warn: downloadThenRun not pinned by hash: deploy/devcontainer-feature/src/radcli/install.sh:26","Warn: downloadThenRun not pinned by hash: deploy/devcontainer-feature/src/radcli/install.sh:28","Warn: downloadThenRun not pinned by hash: test/infra/azure/modules/bootstrap.sh:17","Warn: downloadThenRun not pinned by hash: .github/workflows/build.yaml:250","Warn: npmCommand not pinned by hash: .github/workflows/devcontainer-feature-test.yaml:29","Warn: npmCommand not pinned by hash: .github/workflows/devcontainer-feature-test.yaml:41","Warn: downloadThenRun not pinned by hash: .github/workflows/functional-test-noncloud.yaml:405","Warn: npmCommand not pinned by hash: .github/workflows/lint.yaml:59","Warn: npmCommand not pinned by hash: .github/workflows/lint.yaml:61","Warn: downloadThenRun not pinned by hash: .github/workflows/long-running-azure.yaml:246","Warn: npmCommand not pinned by hash: .github/workflows/publish-docs.yaml:67","Warn: npmCommand not pinned by hash: .github/workflows/publish-docs.yaml:69","Warn: downloadThenRun not pinned by hash: .github/workflows/purge-azure-test-resources.yaml:46","Warn: npmCommand not pinned by hash: .github/workflows/validate-bicep.yaml:56","Info:   3 out of  90 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of  63 third-party GitHubAction dependencies pinned","Info:   0 out of   8 downloadThenRun dependencies pinned","Info:   6 out of   6 goCommand dependencies pinned","Info:   0 out of  10 containerImage dependencies pinned","Info:   3 out of  13 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: pkg/ucp/resources/id_test.go:1233"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build.yaml:167"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":0,"reason":"13 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2750","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GHSA-9h84-qmv7-982p","Warn: Project is vulnerable to: GHSA-f9f8-9pmf-xv68","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-7q7g-4xm8-89cq","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-5crp-9r3c-p9vr","Warn: Project is vulnerable to: GHSA-cmhx-cq75-c4mj","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 13 contributing companies or organizations","details":["Info: found contributions from: Comcast, aspnet, azure office of the cto, chainguard inc, comcast, dapr, dotnet, microsoft, microsoft @azure, microsoft azure, microsoft corporation, radius-project, salesforce"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-14T21:29:22.951Z","repository_id":200563023,"created_at":"2025-08-14T21:29:22.951Z","updated_at":"2025-08-14T21:29:22.951Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30206336,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-06T19:07:06.838Z","status":"online","status_checked_at":"2026-03-07T02:00:06.765Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-31T19:00:29.371Z","updated_at":"2026-03-07T03:01:37.746Z","avatar_url":"https://github.com/radius-project.png","language":"Go","funding_links":[],"categories":["Go","Configuration Management","Continuous Delivery \u0026 GitOps"],"sub_categories":[],"readme":"# Radius\n\nRadius is a cloud-native application platform that enables developers and the platform engineers that support them to collaborate on delivering and managing cloud-native applications that follow organizational best practices for cost, operations and security, by default. Radius is an open-source project that supports deploying applications across private cloud, Microsoft Azure, and Amazon Web Services, with more cloud providers to come. \n\nRadius is a [Cloud Native Computing Foundation (CNCF) sandbox project](https://www.cncf.io/sandbox-projects/).\n\n## Overview\n\nThe evolution of cloud computing has increased the speed of innovation for many companies, whether they are building 2 and 3-tier applications, or complex microservice-based applications. Cloud native technologies like Kubernetes have made it easier to build applications that can run anywhere. At the same time, many applications have become more complex, and managing them in the cloud increasingly difficult, as companies build cloud-native applications composed of interconnected services and deploy them to multiple public clouds and their private infrastructure. While Kubernetes is a key enabler, we see many organizations building abstractions over Kubernetes, usually focused on compute, to work around its limitations:  Kubernetes has no formal definition of an application, it mingles infrastructure and application concepts and it is overwhelmingly complex.  Developers also inevitably realize their applications require much more than Kubernetes, including support for dependencies like application programming interface (API) front ends, key/value stores, caches, and observability systems.  Amidst these challenges for developers, their corporate IT counterparts also must enforce an ever-growing matrix of corporate standards, compliance, and security requirements, while enabling rapid application innovation. \n\nRadius was designed to address these distinct but related challenges that arise across development and operations as companies continue their journey to cloud.  Radius meets application teams where they are by supporting proven technologies like Kubernetes, existing infrastructure tools including Terraform and Bicep and by integrating with existing CI/CD systems like GitHub Actions. Radius supports multi-tier web-plus-data to complex microservice applications like eShop, a popular cloud reference application from Microsoft.\n\nKey features of the Radius platform include: \n- *Team Collaboration*: Radius Applications and Environments allow developers to work with Operations on application definition and delivery.\n- *Infrastructure Recipes*: Swappable infrastructure that complies with organization best practices and IT policy be default.\n- *Application Graph*: Understand how services and infrastructure in an application are interconnected.\n- *Cloud Neutral*: Deploy across development, on-premises and cloud environments with a consistent experience.\n- *Incremental Adoption*: Integrate Radius into existing workflows and existing catalogs of Infrastructure-as-Code templates.\n\n## Release status\n\nThis is an early release of Radius which enables the community to learn about and experiment with the platform. Please let us know what you think and open Issues when you find bugs or want to request a new feature. Radius is not yet ready for production workloads.\n\n## Getting started\n\n1. Follow the [getting started guide](https://docs.radapp.io/getting-started/) to install and try out Radius\n1. Visit the [Tutorials](https://docs.radapp.io/tutorials) and [User Guides](https://docs.radapp.io/guides) to learn more about Radius and start radifying your apps\n\n## Getting help\n\n- ❓ **Have a question?** - Visit our [Discord server](https://discord.gg/SRG3ePMKNy) to post your question and we'll get back to you ASAP\n- ⚠️ **Found an issue?** - Refer to our [Issues guide](docs/contributing/contributing-issues) for instructions on filing a bug report\n- 💡 **Have a proposal?** - Refer to our [Issues guide](docs/contributing/contributing-issues) for instructions on filing a feature request\n\n## Community\n\nWe welcome your contributions and suggestions! One of the easiest ways to contribute is to participate in Issue discussions, chat on [Discord server](https://discord.gg/SRG3ePMKNy) or the monthly [community calls](#community-calls). For more information on the community engagement, developer and contributing guidelines and more, head over to the [Radius community repo](https://github.com/radius-project/community).\n\n### Contact us\n\nPlease visit our [Discord server](https://discord.gg/SRG3ePMKNy) to contact us and we'll get back to you ASAP.\n\n### Community calls\n\nEvery month we host a community call to showcase new features, review upcoming milestones, and engage in a Q\u0026A. All are welcome!\n\n📞 Visit our [community meetings](https://github.com/radius-project/community/#community-meetings) page for upcoming dates and the meeting link.\n\n## Contributing to Radius\n\nVisit [Contributing](./CONTRIBUTING.md) for more information on how to contribute to Radius.\nTo author Radius Recipes visit [Author Custom Radius Recipes](https://docs.radapp.io/guides/recipes/howto-author-recipes/).\nTo contribute to Radius documentation visit [Radius documentation](https://docs.radapp.io/contributing/docs/)\n\n## Repositories\n\n[Radius](https://github.com/radius-project/radius) is the main Radius repository. It contains all of Radius code and documentation.\nIn addition, we have the below repositories.\n\n| Repo | Description |\n|:-----|:------------|\n| [Docs](https://github.com/radius-project/docs) | This repository contains the Radius documentation source for Radius.\n| [Samples](https://github.com/radius-project/samples) | This repository contains the source code for quickstarts, reference apps, and tutorials for Radius.\n| [Recipes](https://github.com/radius-project/recipes) | This repo contains commonly used Recipe templates for Radius Environments.\n| [Website](https://github.com/radius-project/website) | This repository contains the source code for the Radius website.\n| [AWS Bicep Types](https://github.com/radius-project/bicep-types-aws) | This repository contains the tooling for Bicep support for AWS resource types.\n\n\n## Security\n\nPlease refer to our guide on [Reporting security vulnerabilities](SECURITY.md)\n\n## Code of conduct\n\nPlease refer to our [Radius Community Code of Conduct](https://github.com/radius-project/community/blob/main/CODE-OF-CONDUCT.md)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fradius-project%2Fradius","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fradius-project%2Fradius","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fradius-project%2Fradius/lists"}