{"id":15055762,"url":"https://github.com/shannah/jdeploy","last_synced_at":"2026-04-02T14:16:40.018Z","repository":{"id":14593343,"uuid":"76770100","full_name":"shannah/jdeploy","owner":"shannah","description":"Developer friendly desktop deployment tool","archived":false,"fork":false,"pushed_at":"2026-03-22T17:18:21.000Z","size":1105933,"stargazers_count":411,"open_issues_count":53,"forks_count":24,"subscribers_count":8,"default_branch":"master","last_synced_at":"2026-03-23T06:36:23.172Z","etag":null,"topics":["deployment","desktop-app","java","javafx","javafx-desktop-apps"],"latest_commit_sha":null,"homepage":"https://www.jdeploy.com","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/shannah.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2016-12-18T07:52:56.000Z","updated_at":"2026-03-19T03:25:31.000Z","dependencies_parsed_at":"2025-12-01T08:07:46.016Z","dependency_job_id":null,"html_url":"https://github.com/shannah/jdeploy","commit_stats":{"total_commits":314,"total_committers":6,"mean_commits":"52.333333333333336","dds":"0.015923566878980888","last_synced_commit":"6d19bbfcfed2e2dc73fdefbbeb3574a24ff42069"},"previous_names":[],"tags_count":339,"template":false,"template_full_name":null,"purl":"pkg:github/shannah/jdeploy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shannah%2Fjdeploy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shannah%2Fjdeploy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shannah%2Fjdeploy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shannah%2Fjdeploy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/shannah","download_url":"https://codeload.github.com/shannah/jdeploy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shannah%2Fjdeploy/sbom","scorecard":{"id":816072,"data":{"date":"2025-08-11","repo":{"name":"github.com/shannah/jdeploy","commit":"9033be9eba8ce9b9519ac759ca176f204d020852"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3,"checks":[{"name":"Maintained","score":10,"reason":"18 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/integration_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/jpackage-linux-test.yml:1","Warn: no topLevel permission defined: .github/workflows/jpackage-macos-test.yml:1","Warn: no topLevel permission defined: .github/workflows/jpackage-windows-msi-test.yml:1","Warn: no topLevel permission defined: .github/workflows/mac_codesign_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/maven.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cli/src/main/resources/ca/weblite/jdeploy/cheerpj/jdeploy-cheerpj.jar:1","Warn: binary detected: cli/src/main/resources/ca/weblite/jdeploy/jar-runner.jar:1","Warn: binary detected: cli/src/main/resources/ca/weblite/jdeploy/jetty-runner.jar:1","Warn: binary detected: installer/lib/CN1-Compatlib.jar:1","Warn: binary detected: installer/lib/XMLLib.jar:1","Warn: binary detected: installer/lib/clove-io-0.1.jar:1","Warn: binary detected: installer/lib/commons-cli-1.3.1-javadoc.jar:1","Warn: binary detected: installer/lib/commons-cli-1.3.1.jar:1","Warn: binary detected: installer/lib/commons-compress-1.19.jar:1","Warn: binary detected: installer/lib/commons-exec-1.3.jar:1","Warn: binary detected: installer/lib/commons-io-2.5.jar:1","Warn: binary detected: installer/lib/commons-lang3-3.9.jar:1","Warn: binary detected: installer/lib/icns-core-1.2-SNAPSHOT.jar:1","Warn: binary detected: installer/lib/jetty-runner.jar:1","Warn: binary detected: installer/lib/jtar-1.1.jar:1","Warn: binary detected: installer/lib/thumbnailator-0.4.8.jar:1","Warn: binary detected: installer/lib/zip4j-2.3.1-SNAPSHOT.jar:1","Warn: binary detected: installer/src/main/resources/com/izforge/izpack/util/os/ShellLink_ARM64.dll:1","Warn: binary detected: installer/src/main/resources/com/izforge/izpack/util/os/ShellLink_x64.dll:1","Warn: binary detected: installer/src/main/resources/themes/fxtheme.jar:1","Warn: binary detected: installer/tests/mock_launcher/mock_launcher_win.exe:1","Warn: binary detected: installer/tests/mock_launcher/mock_launcher_win_arm64.exe:1","Warn: binary detected: installer/tests/mock_launcher/mock_launcher_win_x64.exe:1","Warn: binary detected: lib/Blake2b-dfb5dcaa85.jar:1","Warn: binary detected: lib/CN1-Compatlib.jar:1","Warn: binary detected: lib/CopyLibs/org-netbeans-modules-java-j2seproject-copylibstask.jar:1","Warn: binary detected: lib/XMLLib.jar:1","Warn: binary detected: lib/clove-io-0.1.jar:1","Warn: binary detected: lib/commons-cli-1.3.1-javadoc.jar:1","Warn: binary detected: lib/commons-cli-1.3.1.jar:1","Warn: binary detected: lib/commons-exec-1.3.jar:1","Warn: binary detected: lib/commons-lang3-3.9.jar:1","Warn: binary detected: lib/commons-text-1.8.jar:1","Warn: binary detected: lib/icns-core-1.2-SNAPSHOT.jar:1","Warn: binary detected: lib/image4j-0.7.2.jar:1","Warn: binary detected: lib/jetty-runner.jar:1","Warn: binary detected: lib/jtar-1.1.jar:1","Warn: binary detected: lib/thumbnailator-0.4.8.jar:1","Warn: binary detected: lib/zip4j-2.3.1-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/blake2b/1.0.0/blake2b-1.0.0.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/cn1-compatlib/1.0-SNAPSHOT/cn1-compatlib-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/image4j/0.7.2/image4j-0.7.2.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-linux-amd64/1.0-SNAPSHOT/jdeploy-installer-template-linux-amd64-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-linux-arm64/1.0-SNAPSHOT/jdeploy-installer-template-linux-arm64-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-mac-amd64/1.0-SNAPSHOT/jdeploy-installer-template-mac-amd64-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-mac-arm64/1.0-SNAPSHOT/jdeploy-installer-template-mac-arm64-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-mac/1.0-SNAPSHOT/jdeploy-installer-template-mac-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-win-amd64/1.0-SNAPSHOT/jdeploy-installer-template-win-amd64-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-win-arm64/1.0-SNAPSHOT/jdeploy-installer-template-win-arm64-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jdeploy-installer-template-win/1.0-SNAPSHOT/jdeploy-installer-template-win-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/jetty-runner/1.0-SNAPSHOT/jetty-runner-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/xmllib/1.0-SNAPSHOT/xmllib-1.0-SNAPSHOT.jar:1","Warn: binary detected: maven-repository/ca/weblite/jdeploy/zip4j/2.3.1-SNAPSHOT/zip4j-2.3.1-SNAPSHOT.jar:1","Warn: binary detected: shared/src/main/resources/com/joshondesign/appbundler/linux/arm64/Client4JLauncher:1","Warn: binary detected: shared/src/main/resources/com/joshondesign/appbundler/linux/x64/Client4JLauncher:1","Warn: binary detected: shared/src/main/resources/com/joshondesign/appbundler/mac/arm64/Client4JLauncher:1","Warn: binary detected: shared/src/main/resources/com/joshondesign/appbundler/mac/x64/Client4JLauncher:1","Warn: binary detected: shared/src/main/resources/com/joshondesign/appbundler/win/arm64/Client4JLauncher.exe:1","Warn: binary detected: shared/src/main/resources/com/joshondesign/appbundler/win/x64/Client4JLauncher.exe:1","Warn: binary detected: tests/projects/LauncherTest1/target/jdeploy-it-test-project-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/LauncherTest1/target/libs/json-20240303.jar:1","Warn: binary detected: tests/projects/LauncherTestMacBundleJRE/target/jdeploy-it-test-project-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/LauncherTestMacBundleJRE/target/libs/json-20240303.jar:1","Warn: binary detected: tests/projects/LauncherTestMacCodesign/target/jdeploy-it-test-project-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/LauncherTestMacCodesign/target/libs/json-20240303.jar:1","Warn: binary detected: tests/projects/TextEditor/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditor2/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditor3/target/subdir/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditor4/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditor5/target/subdir/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditor6/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditor7/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditorBundleJRECodesign/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditorBundleJRECodesignDMG/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditorCodesign/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditorMacBundleJREDMG/target/jdeploy-it-test-project-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditorMacBundleJREDMG/target/libs/json-20240303.jar:1","Warn: binary detected: tests/projects/TextEditorSignPackage/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditorWithCustomRegistryUrl/target/TextEditor-1.0-SNAPSHOT.jar:1","Warn: binary detected: tests/projects/TextEditorWithDefaultRegistryUrl/target/TextEditor-1.0-SNAPSHOT.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 16 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-78wr-2p64-hpwj","Warn: Project is vulnerable to: GHSA-gwrp-pvrq-jmwv","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration_tests.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-linux-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-linux-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-linux-test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-linux-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-linux-test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-linux-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-macos-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-macos-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-macos-test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-macos-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-macos-test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-macos-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/jpackage-windows-msi-test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-windows-msi-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/jpackage-windows-msi-test.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-windows-msi-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-windows-msi-test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-windows-msi-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-windows-msi-test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-windows-msi-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jpackage-windows-msi-test.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/jpackage-windows-msi-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mac_codesign_tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/mac_codesign_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mac_codesign_tests.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/mac_codesign_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mac_codesign_tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/mac_codesign_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/maven.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/maven.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/maven.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/maven.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/shannah/jdeploy/maven.yml/master?enable=pin","Warn: npmCommand not pinned by hash: install-signed-installer-templates.sh:16","Warn: npmCommand not pinned by hash: install-signed-installer-templates.sh:18","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-23T14:17:56.829Z","repository_id":14593343,"created_at":"2025-08-23T14:17:56.829Z","updated_at":"2025-08-23T14:17:56.829Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31307689,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-02T12:59:32.332Z","status":"ssl_error","status_checked_at":"2026-04-02T12:54:48.875Z","response_time":89,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["deployment","desktop-app","java","javafx","javafx-desktop-apps"],"created_at":"2024-09-24T21:46:08.436Z","updated_at":"2026-04-02T14:16:39.997Z","avatar_url":"https://github.com/shannah.png","language":"Java","readme":"# jDeploy\n\nDeveloper friendly desktop deployment tool.  See [the jDeploy Website](https://www.jdeploy.com) for usage instructions.\n\n## GitHub Action Instructions\n\nThe jdeploy github action allows you to generate native desktop installers for your Java project in a Github workflow.  This action can be run for both commits and releases.  \n\nIf used on a commit to a branch, it will publish the the app installers to a release named after the branch. E.g. For the \"master\" branch, it would post installers to a tag named \"master\".  If used on a \"tag\", it will simply add the installers as artifacts of the release.  In both cases it will add some download links to the release notes.\n\n### Example Usage\n\nIMPORTANT: For this action to work, you must first configure your project with jDeploy, as described in [the jDeploy Developer Guide](https://www.jdeploy.com/docs/manual/).  \n\nAdd the following to your workflow in a step *after* the app has been built.\n\n```yaml\n- name: Build App Installer Bundles\n  uses: actions/jdeploy@master\n  with:\n    github_token: ${{ github.token }}\n```\n\nIf this is run on \"commit\", then it will create or update a release with the same name as the branch.  If this is run on a tag or release, it will add the installers as artifacts to the release.  In both cases, it appends notes to the release with download links.\n\n[See example release](https://github.com/shannah/jdeploy-javafx-starter/releases/tag/master)\n\n### Example Workflow\n\n```yaml\n# This workflow will build a Java project with Maven and bundle them as native app installers with jDeploy\n# See https://www.jdeploy.com for more information.\n\nname: jDeploy CI with Maven\n\non:\n  push:\n    branches: ['*']\n    tags: ['*']\n\njobs:\n  build:\n\n    runs-on: ubuntu-latest\n\n    steps:\n      - uses: actions/checkout@v3\n      - name: Set up JDK\n        uses: actions/setup-java@v3\n        with:\n          java-version: '17'\n          distribution: 'temurin'\n          cache: maven\n      - name: Build with Maven\n        run: mvn -B package --file pom.xml\n      - name: Build App Installer Bundles\n        uses: shannah/jdeploy@master\n        with:\n          github_token: ${{ github.token }}\n```\n\n### Example Project\n\nThe [jDeploy JavaFX Starter Project](https://github.com/shannah/jdeploy-javafx-starter) is a template repository for a JavaFX application.  It comes pre-configured with this workflow to generate both snapshot builds for each branch, and release builds.\n\n### Learn More\n\nSee [the jDeploy Developer Guide](https://www.jdeploy.com/docs/manual/#_publishing_on_github) to learn more.\n\n### Supported Parameters\n\n| Parameter           | Description                                                                            | Default                   |\n|---------------------|----------------------------------------------------------------------------------------|---------------------------|\n| `github_token`      | GitHub Action token, e.g. `\"${{ secrets.GITHUB_TOKEN }}\"`.                             | `null`                    |\n| `target_repository` | The repository where releases should be published to, if different than the current repo. | `${{ github.repository }}` |\n| `deploy_target`     | The deployment target. \"github\" or \"npm\"                                               | `github`                  |\n| `npm_token`         | The `NPM_TOKEN` for publishing to npm.  Only required if `deploy_target`==`npm`        | `null`                    |`\n| `jdeploy_version`   | The jdeploy version to use for building the installers.                                | `4.0.0-alpha.38`           |\n\n## License\n\n[Apache2](LICENSE)\n\n## Contact\n\n[Steve Hannah](http://sjhannah.com)\n\n\n","funding_links":[],"categories":["Java"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshannah%2Fjdeploy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fshannah%2Fjdeploy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshannah%2Fjdeploy/lists"}