{"id":15032719,"url":"https://github.com/vowpalwabbit/vowpal_wabbit","last_synced_at":"2026-03-01T20:02:00.047Z","repository":{"id":625732,"uuid":"265995","full_name":"VowpalWabbit/vowpal_wabbit","owner":"VowpalWabbit","description":"Vowpal Wabbit is a machine learning system which pushes the frontier of machine learning with techniques such as online, hashing, allreduce, reductions, learning2search, active, and interactive learning.  ","archived":false,"fork":false,"pushed_at":"2026-02-26T22:18:19.000Z","size":173396,"stargazers_count":8662,"open_issues_count":2,"forks_count":1930,"subscribers_count":333,"default_branch":"master","last_synced_at":"2026-02-26T22:39:31.696Z","etag":null,"topics":["active-learning","c-plus-plus","contextual-bandits","cpp","learning-to-search","machine-learning","online-learning","reinforcement-learning"],"latest_commit_sha":null,"homepage":"https://vowpalwabbit.org","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/VowpalWabbit.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2009-07-31T19:36:58.000Z","updated_at":"2026-02-26T17:56:53.000Z","dependencies_parsed_at":"2023-07-05T15:01:41.186Z","dependency_job_id":"71cc312d-ef64-4959-9222-f3a0d05c073e","html_url":"https://github.com/VowpalWabbit/vowpal_wabbit","commit_stats":{"total_commits":8312,"total_committers":353,"mean_commits":"23.546742209631727","dds":0.8403512993262753,"last_synced_commit":"4f33d61fca3daeda28068d3a7e1aa5bbdc4c8906"},"previous_names":["johnlangford/vowpal_wabbit"],"tags_count":131,"template":false,"template_full_name":null,"purl":"pkg:github/VowpalWabbit/vowpal_wabbit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/VowpalWabbit%2Fvowpal_wabbit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/VowpalWabbit%2Fvowpal_wabbit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/VowpalWabbit%2Fvowpal_wabbit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/VowpalWabbit%2Fvowpal_wabbit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/VowpalWabbit","download_url":"https://codeload.github.com/VowpalWabbit/vowpal_wabbit/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/VowpalWabbit%2Fvowpal_wabbit/sbom","scorecard":{"id":73704,"data":{"date":"2025-08-11","repo":{"name":"github.com/VowpalWabbit/vowpal_wabbit","commit":"c0f724bea23d68b5c5e48c2f3899c66a5fc57680"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":2.7,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 27/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.event.pull_request.title ': .github/workflows/backward_model_load_check.yml:59","Warn: script injection with untrusted input ' github.event.pull_request.title ': .github/workflows/backward_model_load_check.yml:84","Warn: script injection with untrusted input ' github.event.pull_request.title ': .github/workflows/forward_model_load_check.yml:56","Warn: script injection with untrusted input ' github.event.pull_request.title ': .github/workflows/forward_model_load_check.yml:81"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:22","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/dotnet_nugets.yml:268","Warn: jobLevel 'deployments' permission set to 'write': .github/workflows/dotnet_nugets.yml:269","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/run_benchmarks.yml:22","Warn: jobLevel 'deployments' permission set to 'write': .github/workflows/run_benchmarks.yml:23","Warn: no topLevel permission defined: .github/workflows/asan.yml:1","Warn: no topLevel permission defined: .github/workflows/backward_model_load_check.yml:1","Warn: no topLevel permission defined: .github/workflows/build_docs.yml:1","Warn: no topLevel permission defined: .github/workflows/build_macos.yml:1","Warn: no topLevel permission defined: .github/workflows/build_vw_slim.yml:1","Warn: no topLevel permission defined: .github/workflows/build_windows_cmake.yml:1","Warn: no topLevel permission defined: .github/workflows/check_pr_title.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/dotnet_nugets.yml:1","Warn: no topLevel permission defined: .github/workflows/forward_model_load_check.yml:1","Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Warn: no topLevel permission defined: .github/workflows/native_nugets.yml:1","Warn: no topLevel permission defined: .github/workflows/python_wheels.yml:1","Warn: no topLevel permission defined: .github/workflows/run_benchmarks.yml:1","Warn: no topLevel permission defined: .github/workflows/run_benchmarks_manual.yml:1","Warn: no topLevel permission defined: .github/workflows/upload_coverage.yml:1","Warn: no topLevel permission defined: .github/workflows/valgrind.yml:1","Warn: no topLevel permission defined: .github/workflows/vcpkg_build.yml:1","Warn: no topLevel permission defined: .github/workflows/vendor_build.yml:1","Warn: no topLevel permission defined: .github/workflows/wasm.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: vowpalwabbit/.nuget/NuGet.exe:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/asan.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/asan.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/asan.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/asan.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/asan.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/asan.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/asan.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/asan.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/asan.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/asan.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/backward_model_load_check.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/backward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docs.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docs.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_macos.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_macos.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_vw_slim.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_vw_slim.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_windows_cmake.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_windows_cmake.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_windows_cmake.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_windows_cmake.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_windows_cmake.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/build_windows_cmake.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check_pr_title.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/check_pr_title.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/codeql-analysis.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:298: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:344: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dotnet_nugets.yml:241: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/dotnet_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/forward_model_load_check.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/forward_model_load_check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native_nugets.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/native_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native_nugets.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/native_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native_nugets.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/native_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native_nugets.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/native_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native_nugets.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/native_nugets.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native_nugets.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/native_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native_nugets.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/native_nugets.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:269: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:299: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:314: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:335: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:352: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_wheels.yml:355: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/python_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/run_benchmarks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/run_benchmarks.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run_benchmarks_manual.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/run_benchmarks_manual.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/upload_coverage.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/upload_coverage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/valgrind.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/valgrind.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vcpkg_build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vcpkg_build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vcpkg_build.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vcpkg_build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vcpkg_build.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vcpkg_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vcpkg_build.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vcpkg_build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vcpkg_build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vcpkg_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vendor_build.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vendor_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vendor_build.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vendor_build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vendor_build.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vendor_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vendor_build.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/vendor_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wasm.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/wasm.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasm.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/wasm.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasm.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/wasm.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wasm.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/wasm.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wasm.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/VowpalWabbit/vowpal_wabbit/wasm.yml/master?enable=pin","Warn: pipCommand not pinned by hash: python/vowpalwabbit/conda_install.sh:36","Warn: pipCommand not pinned by hash: .github/workflows/build_docs.yml:103","Warn: pipCommand not pinned by hash: .github/workflows/build_docs.yml:104","Warn: pipCommand not pinned by hash: .github/workflows/build_docs.yml:105","Warn: npmCommand not pinned by hash: .github/workflows/build_docs.yml:106","Warn: pipCommand not pinned by hash: .github/workflows/build_docs.yml:113","Warn: nugetCommand not pinned by hash: .github/workflows/dotnet_nugets.yml:196: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: .github/workflows/dotnet_nugets.yml:197: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:62","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:63","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:65","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:72","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:91","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:131","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:137","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:138","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:214","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:215","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:216","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:365","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:366","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:367","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:74","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:75","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:276","Warn: pipCommand not pinned by hash: .github/workflows/python_wheels.yml:277","Warn: pipCommand not pinned by hash: .github/workflows/run_benchmarks_manual.yml:80","Warn: pipCommand not pinned by hash: .github/workflows/run_benchmarks_manual.yml:82","Warn: downloadThenRun not pinned by hash: .github/workflows/upload_coverage.yml:34","Warn: npmCommand not pinned by hash: .github/workflows/wasm.yml:38","Info:   0 out of 130 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  32 third-party GitHubAction dependencies pinned","Info:   5 out of  30 pipCommand dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned","Info:   1 out of   3 nugetCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"14 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2018-34 / GHSA-2fc2-6r4j-p65h","Warn: Project is vulnerable to: PYSEC-2021-856 / GHSA-5545-2q6w-2gh6","Warn: Project is vulnerable to: PYSEC-2019-108 / GHSA-9fq2-x9r6-wfmf","Warn: Project is vulnerable to: PYSEC-2018-33 / GHSA-cw6w-4rcx-xphc","Warn: Project is vulnerable to: PYSEC-2021-857 / GHSA-f7c7-j99h-c22f","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2017-1 / GHSA-frgw-fgh6-9g52","Warn: Project is vulnerable to: PYSEC-2020-73","Warn: Project is vulnerable to: PYSEC-2020-107 / GHSA-jjw5-xxj6-pcv5","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: PYSEC-2020-108","Warn: Project is vulnerable to: PYSEC-2019-156 / GHSA-xp76-357g-9wqq","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 4 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T04:22:54.234Z","repository_id":625732,"created_at":"2025-08-15T04:22:54.234Z","updated_at":"2025-08-15T04:22:54.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29983122,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-01T16:35:47.903Z","status":"ssl_error","status_checked_at":"2026-03-01T16:35:44.899Z","response_time":124,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["active-learning","c-plus-plus","contextual-bandits","cpp","learning-to-search","machine-learning","online-learning","reinforcement-learning"],"created_at":"2024-09-24T20:19:14.632Z","updated_at":"2026-03-01T20:02:00.041Z","avatar_url":"https://github.com/VowpalWabbit.png","language":"C++","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cimg src=\"/logo_assets/vowpal-wabbits-github-logo@3x.png\" height=\"auto\" width=\"100%\" alt=\"Vowpal Wabbit\"\u003e\n\n[![Linux build](https://github.com/VowpalWabbit/vowpal_wabbit/actions/workflows/vendor_build.yml/badge.svg?branch=master)](https://github.com/VowpalWabbit/vowpal_wabbit/actions/workflows/vendor_build.yml)\n[![macOS build](https://github.com/VowpalWabbit/vowpal_wabbit/actions/workflows/build_macos.yml/badge.svg?branch=master)](https://github.com/VowpalWabbit/vowpal_wabbit/actions/workflows/build_macos.yml)\n[![Windows build](https://github.com/VowpalWabbit/vowpal_wabbit/actions/workflows/vcpkg_build.yml/badge.svg?branch=master)](https://github.com/VowpalWabbit/vowpal_wabbit/actions/workflows/vcpkg_build.yml)\n\n[![codecov](https://codecov.io/gh/VowpalWabbit/vowpal_wabbit/branch/master/graph/badge.svg)](https://codecov.io/gh/VowpalWabbit/vowpal_wabbit)\n\nThis is the *Vowpal Wabbit* fast online learning code.\n\n## Why Vowpal Wabbit?\nVowpal Wabbit is a machine learning system which pushes the frontier of machine learning with techniques such as online, hashing, allreduce, reductions, learning2search, active, and interactive learning. There is a specific focus on reinforcement learning with several contextual bandit algorithms implemented and the online nature lending to the problem well. Vowpal Wabbit is a destination for implementing and maturing state of the art algorithms with performance in mind.\n\n- **Input Format.** The input format for the learning algorithm is substantially more flexible than might be expected. Examples can have features consisting of free form text, which is interpreted in a bag-of-words way. There can even be multiple sets of free form text in different namespaces.\n- **Speed.** The learning algorithm is fast -- similar to the few other online algorithm implementations out there. There are several optimization algorithms available with the baseline being sparse gradient descent (GD) on a loss function.\n- **Scalability.** This is not the same as fast. Instead, the important characteristic here is that the memory footprint of the program is bounded independent of data. This means the training set is not loaded into main memory before learning starts. In addition, the size of the set of features is bounded independent of the amount of training data using the hashing trick.\n- **Feature Interaction.** Subsets of features can be internally paired so that the algorithm is linear in the cross-product of the subsets. This is useful for ranking problems. The alternative of explicitly expanding the features before feeding them into the learning algorithm can be both computation and space intensive, depending on how it's handled.\n\n[Visit the wiki to learn more.](https://github.com/VowpalWabbit/vowpal_wabbit/wiki)\n\n## Getting Started\nFor the most up to date instructions for getting started on Windows, MacOS or Linux [please see the wiki](https://github.com/VowpalWabbit/vowpal_wabbit/wiki/Getting-started). This includes:\n\n- [Installing with a package manager](https://github.com/VowpalWabbit/vowpal_wabbit/wiki/Getting-started)\n- [Building](https://github.com/VowpalWabbit/vowpal_wabbit/wiki/Building)\n- [Tutorial](https://github.com/VowpalWabbit/vowpal_wabbit/wiki/Tutorial)\n\n## Examples and Demos\n- [demo/](demo/) - Command-line demos and experiments organized by VW feature\n- [python/docs/source/examples/](python/docs/source/examples/) - Python Jupyter notebook examples\n- [python/docs/source/tutorials/](python/docs/source/tutorials/) - Python and CLI tutorials\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvowpalwabbit%2Fvowpal_wabbit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fvowpalwabbit%2Fvowpal_wabbit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvowpalwabbit%2Fvowpal_wabbit/lists"}