{"id":14975796,"url":"https://github.com/tyktechnologies/tyk","last_synced_at":"2026-01-29T15:00:51.507Z","repository":{"id":16779701,"uuid":"19537979","full_name":"TykTechnologies/tyk","owner":"TykTechnologies","description":"Tyk Open Source API Gateway written in Go, supporting REST, GraphQL, TCP and gRPC protocols","archived":false,"fork":false,"pushed_at":"2026-01-26T16:35:16.000Z","size":257594,"stargazers_count":10601,"open_issues_count":384,"forks_count":1155,"subscribers_count":261,"default_branch":"master","last_synced_at":"2026-01-26T20:12:40.832Z","etag":null,"topics":["api","api-gateway","api-management","cloudnative","go","graphql","grpc","k8s","kubernetes","microservices","reverse-proxy","tyk"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"Microsoft/DMTK","license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TykTechnologies.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":"CLA.md"}},"created_at":"2014-05-07T14:38:24.000Z","updated_at":"2026-01-26T14:24:07.000Z","dependencies_parsed_at":"2026-01-17T13:13:43.658Z","dependency_job_id":null,"html_url":"https://github.com/TykTechnologies/tyk","commit_stats":{"total_commits":4585,"total_committers":128,"mean_commits":35.8203125,"dds":0.83206106870229,"last_synced_commit":"bc067e756d7e33d33b572292e669aead11dd1835"},"previous_names":["lonelycode/tyk"],"tags_count":1064,"template":false,"template_full_name":null,"purl":"pkg:github/TykTechnologies/tyk","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TykTechnologies%2Ftyk","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TykTechnologies%2Ftyk/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TykTechnologies%2Ftyk/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TykTechnologies%2Ftyk/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TykTechnologies","download_url":"https://codeload.github.com/TykTechnologies/tyk/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TykTechnologies%2Ftyk/sbom","scorecard":{"id":144711,"data":{"date":"2025-08-11","repo":{"name":"github.com/TykTechnologies/tyk","commit":"e7dd30f1dc4f1e1ca1f799b6665dc8859d94c606"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 29/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:312","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:511","Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:512","Warn: no topLevel permission defined: .github/workflows/ci-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/connectivity-review.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:13","Warn: no topLevel permission defined: .github/workflows/force-merge.yaml:1","Warn: no topLevel permission defined: .github/workflows/lint-swagger.yml:1","Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/performance-review.yml:13","Warn: no topLevel permission defined: .github/workflows/plugin-compiler-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_agent.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/probe.yml:11","Warn: no topLevel permission defined: .github/workflows/release-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/remove_old_draft_releases.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/security-review.yml:13","Warn: no topLevel permission defined: .github/workflows/update-tyk-analytics.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tests.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/ci-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/codeql-analysis.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/connectivity-review.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/connectivity-review.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/dependency-review.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/force-merge.yaml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/force-merge.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-swagger.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint-swagger.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-swagger.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint-swagger.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-swagger.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint-swagger.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-swagger.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint-swagger.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-swagger.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint-swagger.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-swagger.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint-swagger.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance-review.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/performance-review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/plugin-compiler-build.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/plugin-compiler-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_agent.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/pr_agent.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/probe.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/probe.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-tests.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:267: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:297: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:335: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:343: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:347: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:409: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:413: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:416: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:432: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:466: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:470: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:473: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:474: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:492: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:517: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove_old_draft_releases.yaml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/remove_old_draft_releases.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-review.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/security-review.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-tyk-analytics.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/update-tyk-analytics.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-tyk-analytics.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/TykTechnologies/tyk/update-tyk-analytics.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: containerImage not pinned by hash: ci/Dockerfile.distroless:3","Warn: containerImage not pinned by hash: ci/Dockerfile.distroless:13: pin your Docker image by updating gcr.io/distroless/base-debian12:latest to gcr.io/distroless/base-debian12:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: ci/Dockerfile.std:3: pin your Docker image by updating debian:trixie-slim to debian:trixie-slim@sha256:cc92da07b99dd5c078cb5583fdb4ba639c7c9c14eb78508a2be285ca67cc738a","Warn: containerImage not pinned by hash: ci/images/hybrid/Dockerfile:1: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:2424c1850714a4d94666ec928e24d86de958646737b1d113f5b2207be44d37d8","Warn: containerImage not pinned by hash: ci/images/plugin-compiler/Dockerfile:2","Warn: containerImage not pinned by hash: ci/tests/python-plugins/extend-python/Dockerfile:2","Warn: containerImage not pinned by hash: ci/tests/python-plugins/extend-python/Dockerfile:4: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:2424c1850714a4d94666ec928e24d86de958646737b1d113f5b2207be44d37d8","Warn: containerImage not pinned by hash: ci/tests/python-plugins/src/Dockerfile:2","Warn: containerImage not pinned by hash: ci/tests/python-plugins/src/Dockerfile:4: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:2424c1850714a4d94666ec928e24d86de958646737b1d113f5b2207be44d37d8","Warn: containerImage not pinned by hash: docs/plugins/python/Dockerfile:2","Warn: containerImage not pinned by hash: docs/plugins/python/Dockerfile:4: pin your Docker image by updating python:3.11-bookworm to python:3.11-bookworm@sha256:c1239cb82bf08176c4c90421ab425a1696257b098d9ce21e68de9319c255a47d","Warn: pipCommand not pinned by hash: docs/plugins/python/Dockerfile:6","Warn: pipCommand not pinned by hash: docs/plugins/python/Dockerfile:6","Warn: pipCommand not pinned by hash: docs/plugins/python/Dockerfile:6","Warn: pipCommand not pinned by hash: .github/workflows/ci-tests.yml:149","Warn: pipCommand not pinned by hash: .github/workflows/ci-tests.yml:150","Warn: pipCommand not pinned by hash: .github/workflows/ci-tests.yml:151","Warn: pipCommand not pinned by hash: .github/workflows/ci-tests.yml:152","Warn: npmCommand not pinned by hash: .github/workflows/lint-swagger.yml:26","Info:   0 out of  30 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  60 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned","Info:   0 out of   7 pipCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:394"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (29) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":1,"reason":"branch protection is not maximal on development and all release branches","details":["Warn: branch protection not enabled for branch 'TT-14891/dynamic-xff-client-ip'","Warn: branch protection not enabled for branch 'TT-14842/configurable-header-size'","Warn: branch protection not enabled for branch 'fix/body-read'","Warn: branch protection not enabled for branch 'feature/streaming-enable-all'","Warn: branch protection not enabled for branch 'feature/bi-streams'","Warn: branch protection not enabled for branch 'bugfix/consul-use-key'","Warn: branch protection not enabled for branch 'feature/websocket-ratelimiting'","Info: 'allow deletion' disabled on branch 'master'","Info: 'allow deletion' disabled on branch 'release-5.3.9'","Info: 'allow deletion' disabled on branch 'release-5.5.2'","Info: 'allow deletion' disabled on branch 'release-5.3.7'","Info: 'force pushes' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'release-5.3.9'","Info: 'force pushes' disabled on branch 'release-5.5.2'","Info: 'force pushes' disabled on branch 'release-5.3.7'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'release-5.3.9'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'release-5.5.2'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'release-5.3.7'","Warn: 'stale review dismissal' is disabled on branch 'master'","Warn: 'stale review dismissal' is disabled on branch 'release-5.3.9'","Warn: 'stale review dismissal' is disabled on branch 'release-5.5.2'","Warn: 'stale review dismissal' is disabled on branch 'release-5.3.7'","Warn: required approving review count is 1 on branch 'master'","Warn: branch 'release-5.3.9' does not require approvers","Warn: branch 'release-5.5.2' does not require approvers","Warn: branch 'release-5.3.7' does not require approvers","Warn: codeowners review is not required on branch 'master'","Warn: codeowners review is not required on branch 'release-5.3.9'","Warn: codeowners review is not required on branch 'release-5.5.2'","Warn: codeowners review is not required on branch 'release-5.3.7'","Warn: 'last push approval' is disabled on branch 'master'","Warn: 'last push approval' is disabled on branch 'release-5.3.9'","Warn: 'last push approval' is disabled on branch 'release-5.5.2'","Warn: 'last push approval' is disabled on branch 'release-5.3.7'","Info: 'up-to-date branches' is required to merge on branch 'master'","Info: 'up-to-date branches' is required to merge on branch 'release-5.3.9'","Warn: 'up-to-date branches' is disabled on branch 'release-5.5.2'","Info: 'up-to-date branches' is required to merge on branch 'release-5.3.7'","Info: status check found to merge onto on branch 'master'","Info: status check found to merge onto on branch 'release-5.3.9'","Info: status check found to merge onto on branch 'release-5.5.2'","Info: status check found to merge onto on branch 'release-5.3.7'","Info: PRs are required in order to make changes on branch 'master'","Info: PRs are required in order to make changes on branch 'release-5.3.9'","Info: PRs are required in order to make changes on branch 'release-5.5.2'","Info: PRs are required in order to make changes on branch 'release-5.3.7'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: GO-2025-3540"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-16T09:09:49.635Z","repository_id":16779701,"created_at":"2025-08-16T09:09:49.635Z","updated_at":"2025-08-16T09:09:49.635Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28880017,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-29T10:31:27.438Z","status":"ssl_error","status_checked_at":"2026-01-29T10:31:01.017Z","response_time":59,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["api","api-gateway","api-management","cloudnative","go","graphql","grpc","k8s","kubernetes","microservices","reverse-proxy","tyk"],"created_at":"2024-09-24T13:52:36.494Z","updated_at":"2026-01-29T15:00:51.482Z","avatar_url":"https://github.com/TykTechnologies.png","language":"Go","readme":"![tyk-github-header](https://github.com/TykTechnologies/tyk/assets/8012032/02b3fbae-80ed-4d1f-be87-016326f82ece)\n![License: MPL 2.0](https://img.shields.io/badge/License-MPL%202.0-brightgreen.svg?style=flat_card\u0026color=8836FB)\n[![FOSSA Status](https://app.fossa.io/api/projects/git%2Bgithub.com%2FTykTechnologies%2Ftyk.svg?type=shield)](https://app.fossa.io/projects/git%2Bgithub.com%2FTykTechnologies%2Ftyk?ref=badge_shield)\n\n[![GitHub Latest Release](https://img.shields.io/github/v/release/TykTechnologies/tyk?color=8836FB)](https://github.com/TykTechnologies/tyk/releases)\n[![GitHub Release Date](https://img.shields.io/github/release-date/TykTechnologies/tyk?color=8836FB)](https://github.com/TykTechnologies/tyk/releases)\n[![Docker Pulls](https://img.shields.io/docker/pulls/tykio/tyk-gateway?color=8836FB)](https://hub.docker.com/r/tykio/tyk-gateway/)\n[![GitHub Workflow Status (with event)](https://img.shields.io/github/actions/workflow/status/TykTechnologies/tyk/ci-tests.yml?label=Build%20%26%20Tests\u0026color=8438FA)](https://github.com/TykTechnologies/tyk/actions/workflows/ci-tests.yml)\n[![Go Report Card](https://img.shields.io/badge/go%20report-A+-brightgreen.svg?color=8836FB)](https://goreportcard.com/report/github.com/TykTechnologies/tyk)\n\n![GitHub commit activity](https://img.shields.io/github/commit-activity/m/TykTechnologies/tyk?color=8836FB)\n[![GitHub Repo Stars](https://img.shields.io/github/stars/TykTechnologies/tyk?logoColor=8836FB)](https://github.com/TykTechnologies/tyk/stargazers)\n[![GitHub Repo Forks](https://img.shields.io/github/forks/TykTechnologies/tyk.svg?logoColor=8836FB)](https://github.com/TykTechnologies/tyk/fork)\n![X twitter Follow](https://img.shields.io/twitter/follow/tyk_io?logoColor=8836FB\u0026cacheSeconds=120)\n\n---\n[Documentation](https://tyk.io/docs/) | [Forum](https://community.tyk.io) | [Blog](https://tyk.io/blog/) | [About](https://tyk.io)\n\n\n# Tyk API Gateway\n**Tyk Gateway** is the cloud-native, open source, enterprise-ready API Gateway supporting REST, GraphQL, TCP and gRPC protocols.\n\nBuilt from the ground up, as the [fastest API Gateway](https://tyk.io/performance-benchmarks/) on the planet since 2014.\n\n_Tyk Gateway_ is provided ‘Batteries-included’, with no feature lockout. Enabling your organization to rate limit, auth, gather analytics, apply microservice patterns [and more](#open-source-api-gateway-features) with ease.\n\nTyk runs natively on _Kubernetes_, if you prefer, thanks to the _[Tyk Kubernetes Operator](https://github.com/TykTechnologies/tyk-operator)_\n\n\u003ctable\u003e\n  \u003ctr\u003e\n   \u003ctd\u003e\n     \u003ccenter\u003e\n        \u003ca href=\"https://tyk.io/docs/deployment-and-operations/tyk-open-source-api-gateway/quick-start\"\u003e \u003cimg src=\"https://raw.githubusercontent.com/TykTechnologies/tyk-docs/master/tyk-docs/assets/img/logos/tyk-logo-opensource.svg\" width=\"30%\"\u003e\u003c/a\u003e\n     \u003c/center\u003e\n     \u003c/br\u003eEverything you need to manage APIs. Follow the simple Get Started guide below 👇\n   \u003c/td\u003e\n   \u003ctd\u003e\n     \u003ccenter\u003e\n       \u003ca href=\"https://tyk.io/docs/tyk-self-managed/install\"\u003e \u003cimg src=\"https://raw.githubusercontent.com/TykTechnologies/tyk-docs/master/tyk-docs/assets/img/logos/tyk-logo-selfmanaged.png\" width=\"25%\"\u003e\u003c/a\u003e\n     \u003c/center\u003e\n     \u003c/br\u003eThe Enterprise API Management platform: Management Control Plane, Dashboard GUI \u0026 Developer Portal.\n     \u003c/br\u003e\u003ca href=\"https://tyk.io/api-lifecycle-management/\"\u003eInstall Tyk Self Managed\u003c/a\u003e\n   \u003c/td\u003e\n   \u003ctd\u003e\n     \u003ccenter\u003e\n       \u003ca href=\"https://tyk.io/docs/tyk-cloud\"\u003e \u003cimg src=\"https://raw.githubusercontent.com/TykTechnologies/tyk-docs/master/tyk-docs/assets/img/logos/tyk-logo-cloud.png\" width=\"20%\"\u003e\u003c/a\u003e\n     \u003c/center\u003e\n     \u003c/br\u003eThe Enterprise API Management platform SaaS: Management Control Plane, Dashboard GUI \u0026 Developer Portal.\n     \u003c/br\u003e\u003ca href=\"https://tyk.io/docs/deployment-and-operations/tyk-cloud-platform/quick-start\"\u003eDeploy Tyk Cloud \u003c/a\u003e\n   \u003c/td\u003e\n  \u003c/tr\u003e\n\u003c/table\u003e\n\n---\n\n## Get Started\n\nWe’ll install Tyk, add auth, analytics, quotas and rate limiting to your API in under 5 minutes.\n\nWe recommend [Tyk Gateway Docker](https://github.com/TykTechnologies/tyk-gateway-docker#start-up-the-deployment) as the quickest way to get started now. Later, you can move to one of our other [supported distributions](https://tyk.io/docs/apim/open-source/installation/) if you prefer.\n\n#### Step 1 - Clone the docker-compose repository\n```console\ngit clone https://github.com/TykTechnologies/tyk-gateway-docker\n```\n\n#### Step 2 - Change to the new directory\n```console\ncd tyk-gateway-docker\n```\n\n#### Step 3 - Deploy Tyk Gateway and Redis\n```console\ndocker-compose up\n```\n\nYou can run this in detach mode using the `-d` flag: `docker-compose up -d`\n\n**Congratulations, you’re done!**\n\nYour Tyk Gateway is now configured and ready to use. Confirm this by checking against the ‘hello’ endpoint:\n```console\ncurl localhost:8080/hello\n```\nOutput:\n```json\n{\"status\": \"pass\", \"version\": \"v3.2.1\", \"description\": \"Tyk GW\"}\n```\n\nNext, visit [adding your first API](https://tyk.io/docs/getting-started/create-api/) to Tyk and follow the Open Source instructions.\n\n---\n\nOther Installations are available:\n\n1. [Docker](https://tyk.io/docs/tyk-oss/ce-docker/)\n2. [Kubernetes-Native ](https://github.com/TykTechnologies/tyk-oss-k8s-deployment)\n3. [Kubernetes-Helm](https://github.com/TykTechnologies/tyk-helm-chart#install-tyk-community-edition)\n4. [Ansible](https://tyk.io/docs/tyk-oss/ce-ansible/)\n5. [Red Hat](https://tyk.io/docs/tyk-oss/ce-redhat/)\n6. [Ubuntu](https://tyk.io/docs/tyk-oss/ce-ubuntu/)\n7. [CentOS](https://tyk.io/docs/tyk-oss/ce-centos/)\n8. [Compile Tyk from Source](#compiling-tyk-gateway)\n\n\n## Open Source API Gateway Features\nUse any protocol: REST, SOAP, [GraphQL](https://tyk.io/docs/tyk-apis/tyk-gateway-api/api-definition-objects/graphql/), [gRPC](https://tyk.io/docs/key-concepts/grpc-proxy/), and [TCP](https://tyk.io/docs/key-concepts/tcp-proxy/).\n\nIndustry Standard Authentication: [OIDC](https://tyk.io/docs/advanced-configuration/integrate/api-auth-mode/open-id-connect/#setting-up-oidc), [JWT,](https://tyk.io/docs/tyk-apis/tyk-gateway-api/api-definition-objects/jwt/) [bearer Tokens](https://tyk.io/docs/basic-config-and-security/security/authentication-authorization/bearer-tokens/), [Basic Auth](https://tyk.io/docs/tyk-apis/tyk-dashboard-api/basic-authentication/), Client Certificates and more.\n\n[Open API Standards:](https://tyk.io/docs/getting-started/using-oas-definitions/import-an-oas-api/) Import your Swagger and OpenAPI Documents (OAS 2.X and OAS 3.0.1) to scaffold APIs in Tyk.\n\n[Ultra performant](https://tyk.io/performance-tuning-your-tyk-api-gateway/): Low latency, and thousands of rps with just a single CPU, horizontally and vertically scalable.\n\n[Content mediation](https://tyk.io/docs/advanced-configuration/transform-traffic/): Transform all the things, from request or response headers to converting between SOAP and GraphQL.\n\n[Extensible Plugin Architecture](https://tyk.io/docs/plugins/): Customize Tyk’s middleware chain by writing plugins in your language of choice - from Python to Javascript to Go, or any language which supports gRPC.\n\n[Rate Limiting](https://tyk.io/docs/basic-config-and-security/control-limit-traffic/rate-limiting/#setting-rate-limits-in-the-tyk-community-edition-gateway-ce) \u0026 Quotas: Protect your upstreams from becoming overloaded and/or apply limits for each consumer.\n\n[API Versioning](https://tyk.io/docs/tyk-apis/tyk-gateway-api/api-definition-objects/versioning-endpoint/) - API Versions can be easily set and sunset (deprecated) at a specific time and date.\n\n[Granular Access Control](https://tyk.io/docs/security/security-policies/secure-apis-method-path/) - Grant access to one or more APIs on a per version and operation basis.\n\n[Blocklist](https://tyk.io/docs/advanced-configuration/transform-traffic/endpoint-designer/#blocklist)/[Allowlist](https://tyk.io/docs/advanced-configuration/transform-traffic/endpoint-designer/#allowlist)/[Ignore](https://tyk.io/docs/advanced-configuration/transform-traffic/endpoint-designer/#ignore) endpoint access - Enforce strict security models on a version-by-version basis to your access points.\n\nAnalytics logging - Record detailed usage data on who is using your APIs (raw data only)\n\n[CORS](https://tyk.io/docs/tyk-apis/tyk-gateway-api/api-definition-objects/cors/) - Enable CORS for certain APIs so users can make browser-based requests\n\n[Webhooks](https://tyk.io/docs/basic-config-and-security/report-monitor-trigger-events/webhooks/) - Trigger webhooks against events such as Quota Violations and Authentication failures\n\n[IP AllowListing](https://tyk.io/docs/tyk-apis/tyk-gateway-api/api-definition-objects/ip-whitelisting/) - Block access to non-trusted IP addresses for more secure interactions\n\n[Hitless reloads](https://tyk.io/docs/tyk-configuration-reference/hot-restart-tyk-gateway-process/) - Tyk configurations can be altered dynamically and the service restarted without affecting any active request\n\n[Kubernetes native](https://tyk.io/docs/tyk-oss/ce-helm-chart/) declarative API: using Open Source [Tyk Operator](https://github.com/TykTechnologies/tyk-operator) (more info in OSS section)\n![OpenSourceAPIGateway-Diagram](https://github.com/TykTechnologies/tyk/assets/8012032/7466be3f-fb81-4a95-88ac-3b09254c815d)\n\nTyk Technologies uses the same API Gateway for all it’s applications. Protecting, securing, and processing APIs for thousands of organizations and businesses around the world. Ideal for Open Banking, building software in the clouds as well as exposing APIs to teams, partners \u0026 consumers.\n\n\n## Tyk OSS Integrations\n\nTyk Technologies maintains other Open Source Software which can be used in conjunction with Tyk API Gateway:\n\n[Tyk Pump](https://github.com/TykTechnologies/tyk-pump) - Pluggable analytics purger to move Analytics generated by your Tyk nodes to any back-end.\n\n[Tyk Operator](https://github.com/TykTechnologies/tyk-operator) - Brings API Management capabilities to Kubernetes. Configure Ingress, APIs, Security Policies, Authentication, Authorization, Mediation and more - all using Custom Resources and Kubernetes Native primitives\n\n[Tyk Identity Broker](https://github.com/TykTechnologies/tyk-identity-broker) - Tyk Authentication Proxy for third-party login\n\n[Tyk Sync ](https://tyk.io/docs/tyk-sync/)- Command line tool and library to manage and synchronise a Tyk installation with your version control system (VCS).\n\n[Tyk Mserv](https://github.com/TykTechnologies/mserv) - Asset Server and gRPC host\n\n\n## Documentation\nAll the documentation for Tyk Gateway and other OSS-related topics can be found at [https://tyk.io/docs/tyk-oss-gateway/](https://tyk.io/docs/tyk-oss-gateway/)\n\n\n## Community\n* [Tyk Community Board](https://community.tyk.io/) - Technical support from the Tyk Community\n* [Write a GitHub Issue](https://github.com/TykTechnologies/tyk/issues/new/choose) - Feature requests \u0026 bug reports welcome\n* [Technical blog](https://tyk.io/blog/) - Tyk announcements and updates\n* [Newsletters ](https://pages.tyk.io/newsletter)- Subscribe to our GraphQL \u0026 API newsletters\n* If you are using Tyk give us a star ⭐️\n\n## Licensing\n\nTyk is dual-licensed:\n\n1. Open Source License: The code in the root directory and all subdirectories except the 'ee' folder is released under the MPL v2.0. Please see [LICENSE](https://github.com/TykTechnologies/tyk/blob/master/LICENSE) for the full version of the open source license.\n\n2. Commercial License: The code in the 'ee' folder is subject to a commercial license. For more information about obtaining a commercial license, please contact our sales team at sales@tyk.io.\n\n## Compiling Tyk Gateway\n\nCompile from Source\n```console\ngit clone https://github.com/TykTechnologies/tyk\ngo build\n```\nGo version 1.22 is required to build `master`, the current development version. Tyk is officially supported on `Linux/amd64`, `Linux/i386` and `Linux/arm64`.\n\nTo run tests locally use the following command:\n```console\ngo test ./...\n```\nNote that tests require Redis to be running on the same machine (default port).\n\nTo write your own test please use this guide [https://github.com/TykTechnologies/tyk/blob/master/TESTING.md](https://github.com/TykTechnologies/tyk/blob/master/TESTING.md)\n\n## Contributing\n\nFor more information about contributing PRs and issues, see [CONTRIBUTING.md](https://github.com/TykTechnologies/tyk/blob/master/CONTRIBUTING.md).\n\n—\n","funding_links":[],"categories":["Tools"],"sub_categories":["WebTools"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftyktechnologies%2Ftyk","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftyktechnologies%2Ftyk","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftyktechnologies%2Ftyk/lists"}