{"id":13773045,"url":"https://github.com/scality/metalk8s","last_synced_at":"2026-04-03T16:05:06.549Z","repository":{"id":37470926,"uuid":"124905930","full_name":"scality/metalk8s","owner":"scality","description":"An opinionated Kubernetes distribution with a focus on long-term on-prem deployments","archived":false,"fork":false,"pushed_at":"2026-01-28T08:43:23.000Z","size":92274,"stargazers_count":385,"open_issues_count":505,"forks_count":47,"subscribers_count":66,"default_branch":"development/132.0","last_synced_at":"2026-01-28T23:30:20.847Z","etag":null,"topics":["artesca","cloud","cloud-native","k8s","k8s-cluster","k8s-deployer","k8s-install","kubernetes","kubernetes-cluster","kubernetes-deployment","kubernetes-distribution","kubernetes-installation","kubernetes-monitoring","kubernetes-setup","on-prem","on-premise","on-premises"],"latest_commit_sha":null,"homepage":"","language":"Scheme","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/scality.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-12T14:57:42.000Z","updated_at":"2026-01-28T07:47:01.000Z","dependencies_parsed_at":"2023-09-22T20:57:19.414Z","dependency_job_id":"1c1310be-1e5e-4e2c-8af8-9199cd164e3d","html_url":"https://github.com/scality/metalk8s","commit_stats":{"total_commits":6386,"total_committers":56,"mean_commits":"114.03571428571429","dds":0.7853116191669276,"last_synced_commit":"4a59412e227a7b93ff4ac1c3da5ab02aa92861a4"},"previous_names":[],"tags_count":185,"template":false,"template_full_name":null,"purl":"pkg:github/scality/metalk8s","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scality%2Fmetalk8s","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scality%2Fmetalk8s/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scality%2Fmetalk8s/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scality%2Fmetalk8s/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/scality","download_url":"https://codeload.github.com/scality/metalk8s/tar.gz/refs/heads/development/132.0","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scality%2Fmetalk8s/sbom","scorecard":{"id":803389,"data":{"date":"2025-08-11","repo":{"name":"github.com/scality/metalk8s","commit":"c04cc492905a3731b5e02099e8121bbe51b375d5"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 131.0.0-alpha.3 not signed: https://api.github.com/repos/scality/metalk8s/releases/240188997","Warn: release artifact 132.0.0-alpha.1 not signed: https://api.github.com/repos/scality/metalk8s/releases/237910509","Warn: release artifact 131.0.0-alpha.2 not signed: https://api.github.com/repos/scality/metalk8s/releases/237287554","Warn: release artifact 130.0.3 not signed: https://api.github.com/repos/scality/metalk8s/releases/230406740","Warn: release artifact 131.0.0-alpha.1 not signed: https://api.github.com/repos/scality/metalk8s/releases/229639720","Warn: release artifact 131.0.0-alpha.3 does not have provenance: https://api.github.com/repos/scality/metalk8s/releases/240188997","Warn: release artifact 132.0.0-alpha.1 does not have provenance: https://api.github.com/repos/scality/metalk8s/releases/237910509","Warn: release artifact 131.0.0-alpha.2 does not have provenance: https://api.github.com/repos/scality/metalk8s/releases/237287554","Warn: release artifact 130.0.3 does not have provenance: https://api.github.com/repos/scality/metalk8s/releases/230406740","Warn: release artifact 131.0.0-alpha.1 does not have provenance: https://api.github.com/repos/scality/metalk8s/releases/229639720"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(development/129.0): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-devcontainer.yaml:16","Warn: no topLevel permission defined: .github/workflows/build-devcontainer.yaml:1","Warn: no topLevel permission defined: .github/workflows/build-docs.yaml:1","Warn: no topLevel permission defined: .github/workflows/build-shell-ui.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yaml:1","Warn: no topLevel permission defined: .github/workflows/create-dev-branch.yaml:1","Warn: no topLevel permission defined: .github/workflows/cron-clean-ovh-cloud.yaml:1","Warn: no topLevel permission defined: .github/workflows/crons.yaml:1","Warn: no topLevel permission defined: .github/workflows/downgrade-test.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e-tests.yaml:1","Warn: no topLevel permission defined: .github/workflows/generate-sbom.yaml:1","Warn: no topLevel permission defined: .github/workflows/lifecycle-dev.yaml:1","Warn: no topLevel permission defined: .github/workflows/lifecycle-promoted.yaml:1","Warn: no topLevel permission defined: .github/workflows/multi-node-test.yaml:1","Warn: no topLevel permission defined: .github/workflows/nightly.yaml:1","Warn: no topLevel permission defined: .github/workflows/post-merge.yaml:1","Warn: no topLevel permission defined: .github/workflows/pre-merge.yaml:1","Warn: no topLevel permission defined: .github/workflows/promote.yaml:1","Warn: no topLevel permission defined: .github/workflows/publish.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yaml:1","Warn: no topLevel permission defined: .github/workflows/single-node-test.yaml:1","Warn: no topLevel permission defined: .github/workflows/upgrade-test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pre-merge.yaml:364"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-devcontainer.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-devcontainer.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-devcontainer.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-devcontainer.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-devcontainer.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-devcontainer.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-devcontainer.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-devcontainer.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-docs.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-docs.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-docs.yaml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-docs.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-shell-ui.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-shell-ui.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-shell-ui.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-shell-ui.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-shell-ui.yaml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build-shell-ui.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/build.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/codeql.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/codeql.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/codeql.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-dev-branch.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/create-dev-branch.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-dev-branch.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/create-dev-branch.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-dev-branch.yaml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/create-dev-branch.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cron-clean-ovh-cloud.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/cron-clean-ovh-cloud.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/crons.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/crons.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downgrade-test.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/downgrade-test.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/downgrade-test.yaml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/downgrade-test.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-sbom.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/generate-sbom.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-sbom.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/generate-sbom.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-sbom.yaml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/generate-sbom.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-sbom.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/generate-sbom.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lifecycle-dev.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/lifecycle-dev.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lifecycle-dev.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/lifecycle-dev.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lifecycle-promoted.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/lifecycle-promoted.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lifecycle-promoted.yaml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/lifecycle-promoted.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/multi-node-test.yaml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/multi-node-test.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/multi-node-test.yaml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/multi-node-test.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/multi-node-test.yaml:383: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/multi-node-test.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/multi-node-test.yaml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/multi-node-test.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yaml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/nightly.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yaml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/nightly.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly.yaml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/nightly.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/nightly.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/nightly.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/nightly.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:329: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:534: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:537: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:303: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:371: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:422: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:428: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:356: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:451: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:458: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pre-merge.yaml:507: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/pre-merge.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/promote.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/promote.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/promote.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/publish.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/publish.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/publish.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yaml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/publish.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yaml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/publish.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/release.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/release.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/release.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/single-node-test.yaml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/single-node-test.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/single-node-test.yaml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/single-node-test.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/single-node-test.yaml:299: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/single-node-test.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/single-node-test.yaml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/single-node-test.yaml/development/131.0?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/upgrade-test.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/upgrade-test.yaml/development/131.0?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/upgrade-test.yaml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/scality/metalk8s/upgrade-test.yaml/development/131.0?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/devcontainers/base:noble to mcr.microsoft.com/devcontainers/base:noble@sha256:daa08ddb48ad4e4e7367c348e0a6f250762f1f0d8348f1f9acbef5f884ce093d","Warn: containerImage not pinned by hash: buildchain/static-container-registry/Dockerfile:1: pin your Docker image by updating docker.io/nginx:1.15.12-alpine to docker.io/nginx:1.15.12-alpine@sha256:57a226fb6ab6823027c0704a9346a890ffb0cacde06bc19bbc234c8720673555","Warn: containerImage not pinned by hash: buildchain/static-container-registry/ci/docker/image-provisioner/Dockerfile:1: pin your Docker image by updating docker.io/ubuntu:xenial to docker.io/ubuntu:xenial@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6","Warn: containerImage not pinned by hash: buildchain/static-container-registry/ci/docker/sut/Dockerfile:1: pin your Docker image by updating docker.io/ubuntu:xenial to docker.io/ubuntu:xenial@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6","Warn: containerImage not pinned by hash: charts/loki/src/helm-test/Dockerfile:2","Warn: containerImage not pinned by hash: charts/loki/src/helm-test/Dockerfile:11: pin your Docker image by updating gcr.io/distroless/static:debug to gcr.io/distroless/static:debug@sha256:072204b513ba56f418d58f9d771de54ffe4fddd22fe5cf891697e6129bd8fb6e","Warn: containerImage not pinned by hash: docs/Dockerfile:6: pin your Docker image by updating docker.io/ubuntu:22.04 to docker.io/ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: images/metalk8s-alert-logger/Dockerfile:5","Warn: containerImage not pinned by hash: images/metalk8s-alert-logger/Dockerfile:22","Warn: containerImage not pinned by hash: images/metalk8s-keepalived/Dockerfile:6","Warn: containerImage not pinned by hash: images/metalk8s-keepalived/Dockerfile:21","Warn: containerImage not pinned by hash: images/metalk8s-ui/Dockerfile:3","Warn: containerImage not pinned by hash: images/metalk8s-utils/Dockerfile:5","Warn: containerImage not pinned by hash: operator/Dockerfile:2","Warn: containerImage not pinned by hash: operator/Dockerfile:35: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: shell-ui/Dockerfile:4","Warn: containerImage not pinned by hash: shell-ui/Dockerfile:22","Warn: containerImage not pinned by hash: storage-operator/Dockerfile:2","Warn: containerImage not pinned by hash: storage-operator/Dockerfile:29: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: tools/get-kubeadm-manifests/Dockerfile:1: pin your Docker image by updating rockylinux:8 to rockylinux:8@sha256:9794037624aaa6212aeada1d28861ef5e0a935adaf93e4ef79837119f2a2d04c","Warn: containerImage not pinned by hash: tools/lib-alert-tree/Dockerfile:2","Warn: containerImage not pinned by hash: ui/Dockerfile:3","Warn: pipCommand not pinned by hash: .devcontainer/Dockerfile:61-65","Warn: pipCommand not pinned by hash: .devcontainer/Dockerfile:61-65","Warn: pipCommand not pinned by hash: docs/Dockerfile:27-28","Warn: pipCommand not pinned by hash: images/salt-master/Dockerfile:11-24","Warn: pipCommand not pinned by hash: images/salt-master/Dockerfile:11-24","Warn: pipCommand not pinned by hash: tools/lib-alert-tree/Dockerfile:5","Warn: downloadThenRun not pinned by hash: ui/cypress/requirements.sh:37","Warn: npmCommand not pinned by hash: ui/cypress/requirements.sh:47","Warn: npmCommand not pinned by hash: .github/workflows/pre-merge.yaml:474","Warn: pipCommand not pinned by hash: .github/workflows/release.yaml:43","Info:   0 out of  52 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  35 third-party GitHubAction dependencies pinned","Info:   0 out of   7 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   7 out of   9 npmCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   2 out of  24 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"122 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: PYSEC-2022-42986 / GHSA-43fp-rhv2-5gv8","Warn: Project is vulnerable to: PYSEC-2023-135 / GHSA-xqr8-7jwr-rhp7","Warn: Project is vulnerable to: PYSEC-2021-142 / GHSA-8q59-q68h-6hv4","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2023-74 / GHSA-j8r2-6x86-q33q","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: PYSEC-2023-212 / GHSA-g4mx-q9vg-27p4","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: PYSEC-2023-192 / GHSA-v845-jxx5-vc9f","Warn: Project is vulnerable to: PYSEC-2023-117","Warn: Project is vulnerable to: GHSA-7cx3-6m66-7c5m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2025-3488 / GHSA-6v2p-p543-phr9","Warn: Project is vulnerable to: GHSA-496j-2rq6-j6cc","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: PYSEC-2022-42969","Warn: Project is vulnerable to: GHSA-2qw3-2wv6-p64x","Warn: Project is vulnerable to: GHSA-4277-m35q-7c9w","Warn: Project is vulnerable to: PYSEC-2021-56 / GHSA-hcjf-rp5h-g5h3","Warn: Project is vulnerable to: PYSEC-2021-318 / GHSA-pf7h-h2wq-m7pg","Warn: Project is vulnerable to: GHSA-q27c-j6j9-53w3","Warn: Project is vulnerable to: PYSEC-2023-169 / GHSA-qvh6-3j7x-3hq7","Warn: Project is vulnerable to: PYSEC-2023-166 / GHSA-vpjg-wmf8-29h9","Warn: Project is vulnerable to: PYSEC-2021-346 / GHSA-xf37-qcvf-7m57","Warn: Project is vulnerable to: PYSEC-2023-47","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5","Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579","Warn: Project is vulnerable to: GHSA-jfmj-5v4g-7637","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-84jw-g43v-8gjm","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-593f-38f6-jp5m","Warn: Project is vulnerable to: GHSA-x2rg-q646-7m2v","Warn: Project is vulnerable to: GHSA-jgmv-j7ww-jx2x","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-cpj6-fhp6-mr6j","Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg","Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-rcw3-wmx7-cphr","Warn: Project is vulnerable to: GHSA-963h-3v39-3pqf","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: GHSA-5cpq-8wj7-hf2v","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9","Warn: Project is vulnerable to: PYSEC-2024-60 / GHSA-jjg7-2v4v-x38h","Warn: Project is vulnerable to: PYSEC-2022-260 / GHSA-v973-fxgf-6xhp","Warn: Project is vulnerable to: PYSEC-2022-269 / GHSA-3pgj-pg6c-r5p7","Warn: Project is vulnerable to: GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-cph5-m8f7-6c5x","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc","Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp","Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-58f5-hfqc-jgch","Warn: Project is vulnerable to: GHSA-jv3g-j58f-9mq9","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-pppg-cpfq-h7wr","Warn: Project is vulnerable to: GHSA-hw8r-x6gr-5gjp","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-px4h-xg32-q955","Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6","Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-jgrx-mgxx-jf9v","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-crh6-fp67-6883","Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25","Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj","Warn: Project is vulnerable to: GHSA-7gc6-qh9x-w6h8","Warn: Project is vulnerable to: GHSA-xwcq-pm8m-c4vf","Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq","Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488","Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g","Warn: Project is vulnerable to: GHSA-3xq5-wjfh-ppjc","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6","Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59","Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-23T11:07:00.429Z","repository_id":37470926,"created_at":"2025-08-23T11:07:00.429Z","updated_at":"2025-08-23T11:07:00.429Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28877046,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-29T10:31:27.438Z","status":"ssl_error","status_checked_at":"2026-01-29T10:31:01.017Z","response_time":59,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["artesca","cloud","cloud-native","k8s","k8s-cluster","k8s-deployer","k8s-install","kubernetes","kubernetes-cluster","kubernetes-deployment","kubernetes-distribution","kubernetes-installation","kubernetes-monitoring","kubernetes-setup","on-prem","on-premise","on-premises"],"created_at":"2024-08-03T17:01:10.637Z","updated_at":"2026-01-29T12:02:47.034Z","avatar_url":"https://github.com/scality.png","language":"Scheme","readme":"\u003ch1\u003e\n    \u003cimg src=\"artwork/generated/metalk8s-logo-wide-black-400.png\" width=\"400\" height=\"100%\" alt=\"MetalK8s logo\" title=\"MetalK8s\" /\u003e\n\u003c/h1\u003e\n\nAn opinionated Kubernetes distribution with a focus on long-term on-prem deployments\n\n## Integrating\n\nMetalK8s offers a set of tools to deploy Kubernetes applications, given a set of\nstandards for packaging such applications is respected.\n\nFor more information, please refer to the\n[Integration Guidelines](docs/developer/solutions/index.rst).\n\n## Building\n\nPrerequisites are listed [here](docs/developer/building/requirements.rst).\n\nTo build a MetalK8s ISO, simply type `./doit.sh`.\n\nFor more information, please refer to the\n[Building Documentation](docs/developer/building/index.rst).\n\n## Contributing\n\nIf you'd like to contribute, please review the\n[Contributing Guidelines](CONTRIBUTING.md).\n\n## Testing\n### Requirements\n\n- [Python3.6+](https://www.python.org/)\n- [tox](https://pypi.org/project/tox)\n- [Vagrant](https://www.vagrantup.com/)\n- [VirtualBox](https://www.virtualbox.org)\n\n### Bootstrapping a local environment\n\n```shell\n# Install virtualbox guest addition plugin\nvagrant plugin install vagrant-vbguest\n# Bootstrap a platform on a vagrant environment using\n./doit.sh vagrant_up\n```\n\n### End-to-End Testing\n\nTo run the test-suite locally, first complete the bootstrap step as outlined\nabove, then:\n\n```shell \n# Run tests with tox\ntox -e tests\n```\n\n## Documentation\n### Requirements\n- [Python3.6+](https://www.python.org/)\n- [tox](https://pypi.org/project/tox)\n- [Plantuml](http://plantuml.com/starting)\n\n### Building\n\nTo generate HTML documentation locally in `docs/_build/html`, run the following command:\n\n```shell\n# Generate doc with tox\ntox -e docs\n```\n\n---\n\nMetalK8s version 1 is still hosted in this repository but is no longer maintained.\nThe last release is [MetalK8s 1.3](https://github.com/scality/metalk8s/tree/development/1.3).","funding_links":[],"categories":["Roadmap","SaltStack","Self-hosted tools for bare-metal management","kubernetes","Distributions","Featured On","Cluster"],"sub_categories":["Container Orchestration Distributions"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fscality%2Fmetalk8s","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fscality%2Fmetalk8s","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fscality%2Fmetalk8s/lists"}