{"id":13411864,"url":"https://github.com/zammad/zammad","last_synced_at":"2026-10-18T23:44:30.438Z","repository":{"id":2891488,"uuid":"3898922","full_name":"zammad/zammad","owner":"zammad","description":"Zammad is a web based open source helpdesk/customer support system.","archived":false,"fork":false,"pushed_at":"2026-10-09T10:53:09.000Z","size":1096320,"stargazers_count":5993,"open_issues_count":467,"forks_count":1074,"subscribers_count":131,"default_branch":"develop","last_synced_at":"2026-10-10T02:53:16.544Z","etag":null,"topics":["coffeescript","customer-care","customer-support","graphql","helpdesk","javascript","rails","ruby","support","ticketing","typescript","vite","vuejs","zammad"],"latest_commit_sha":null,"homepage":"https://zammad.org","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zammad.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.asc","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":"publiccode.yml","codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":null,"gemini":null,"cursor":null,"copilot":".github/copilot-instructions.md","dco":null,"cla":null,"disclosure":null}},"created_at":"2012-04-02T08:50:33.000Z","updated_at":"2026-10-09T17:58:43.000Z","dependencies_parsed_at":"2026-10-02T12:27:58.189Z","dependency_job_id":null,"html_url":"https://github.com/zammad/zammad","commit_stats":{"total_commits":15281,"total_committers":164,"mean_commits":93.17682926829268,"dds":0.6321575813101237,"last_synced_commit":"7db582d95b47cfd8f8080a1c71c1a821de3b0d0e"},"previous_names":[],"tags_count":116,"template":false,"template_full_name":null,"purl":"pkg:github/zammad/zammad","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zammad%2Fzammad","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zammad%2Fzammad/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zammad%2Fzammad/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zammad%2Fzammad/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zammad","download_url":"https://codeload.github.com/zammad/zammad/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zammad%2Fzammad/sbom","scorecard":{"id":346369,"data":{"date":"2025-07-07","repo":{"name":"github.com/zammad/zammad","commit":"d1110ed74369551614eb17e8630729655cbe20c4"},"scorecard":{"version":"v5.2.1-18-gbb9c347d","commit":"bb9c347dff6349d986baab6578a46d68a5524c62"},"score":4.4,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/docker-ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/docker-release.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU Affero General Public License v3.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'develop'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-ci.yaml:7"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/ci.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/ci.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/ci.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/ci.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/ci.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/ci.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-ci.yaml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-ci.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-ci.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-ci.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-ci.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-ci.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-ci.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-ci.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-ci.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-ci.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-release.yaml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/zammad/zammad/docker-release.yaml/develop?enable=pin","Warn: containerImage not pinned by hash: .gitlab/packager.io/dockerfiles/Dockerfile.debian:2","Warn: containerImage not pinned by hash: .gitlab/packager.io/dockerfiles/Dockerfile.rhel:2","Warn: containerImage not pinned by hash: .gitlab/packager.io/dockerfiles/Dockerfile.sles:2","Warn: containerImage not pinned by hash: .gitlab/packager.io/dockerfiles/Dockerfile.ubuntu:2","Warn: containerImage not pinned by hash: Dockerfile:7","Warn: containerImage not pinned by hash: Dockerfile:28","Warn: containerImage not pinned by hash: Dockerfile:33","Warn: containerImage not pinned by hash: Dockerfile:82","Warn: containerImage not pinned by hash: doc/developer_manual/assets/ldap/Dockerfile:1: pin your Docker image by updating bitnami/openldap:latest to bitnami/openldap:latest@sha256:687f14a22b5c74fb057a57221acdbe7b8c82e2d3619fc380db3af48ec4aa04ed","Warn: containerImage not pinned by hash: spec/fixtures/files/smime/generate/Dockerfile:1: pin your Docker image by updating debian:buster to debian:buster@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225","Warn: npmCommand not pinned by hash: Dockerfile:29-30","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  18 third-party GitHubAction dependencies pinned","Info:   0 out of  10 containerImage dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"25 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-54xq-cgqr-rpm3","Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-r32x-jhw5-g48p","Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-7wpw-2hjm-89gp","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T07:07:29.952Z","repository_id":2891488,"created_at":"2025-08-18T07:07:29.952Z","updated_at":"2025-08-18T07:07:29.952Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38343425,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-18T02:00:06.448Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["coffeescript","customer-care","customer-support","graphql","helpdesk","javascript","rails","ruby","support","ticketing","typescript","vite","vuejs","zammad"],"created_at":"2024-07-30T20:01:17.744Z","updated_at":"2026-10-18T23:44:25.428Z","avatar_url":"https://github.com/zammad.png","language":"Ruby","funding_links":[],"categories":["Ruby","Uncategorized","Apps","Happy Exploring 🤘","javascript","Miscellaneous","Bonus #3 - Self-Hosted Services","Communication \u0026 Collaboration","Customer Support"],"sub_categories":["Uncategorized","Communication","Rails codebases to study","Notable Mentions","Ruby on Rails","Zendesk"],"readme":"# Welcome to Zammad\n\nAre you juggling countless customer inquiries across multiple channels?\nStruggling to keep your support team on the same page?\nOr spending more time managing your helpdesk than delivering exceptional support to your customers?\n\nZammad is your Swiss Army knife - a web-based, open-source helpdesk and customer support platform\npacked with features to streamline customer communication across channels like email, chat, telephone and social media.\n\n## The Software\n\nThe Zammad software is and will stay open source. It is licensed under the GNU AGPLv3.\nThe source code is [available on GitHub](https://github.com/zammad/zammad) and owned by\nthe [Zammad Foundation](https://zammad-foundation.org/), which is independent of commercial\nproviders such as Zammad GmbH.\n\n## The Company - Zammad GmbH\n\nThe development of Zammad is carried out by the [amazing team of people](https://zammad.com/en/company)\nat [Zammad GmbH](https://zammad.com/) in collaboration with the community.\nWe love to create open source software for you. If you want to ensure the Zammad software\nhas a bright and sustainable future, consider becoming a Zammad customer!\n\n\u003e Are you tired of complex setup, configuration, backup and update tasks? Let us handle this stuff for you! 🚀\n\u003e\n\u003e The easiest and often most cost-effective way to operate Zammad is [our cloud service](https://zammad.com/en/pricing).\n\u003e Give it a try with a [free trial instance](https://zammad.com/en/getting-started)!\n\n## Status\n\n- Toolchain: [![CI](https://github.com/zammad/zammad/workflows/CI/badge.svg)](https://github.com/zammad/zammad/actions/workflows/ci.yaml)\n  [![docker-release workflow](https://github.com/zammad/zammad/workflows/docker-release/badge.svg)](https://github.com/zammad/zammad/actions/workflows/docker-release.yaml)\n  [![documentation status](https://readthedocs.org/projects/zammad/badge/)](https://docs.zammad.org)\n- Docker container images: [![Docker images for Zammad](https://img.shields.io/badge/version-stable-blue.svg)](https://hub.docker.com/r/zammad/zammad-docker-compose)\n  [![Dockerhub Pulls](https://badgen.net/docker/pulls/zammad/zammad-docker-compose?icon=docker\u0026label=pulls)](https://hub.docker.com/r/zammad/zammad-docker-compose/)\n- Helm chart for Kubernetes: [![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/zammad)](https://artifacthub.io/packages/helm/zammad/zammad)\n  [![Release downloads](https://img.shields.io/github/downloads/zammad/zammad-helm/total.svg)](https://github.com/zammad/zammad-helm/releases)\n- Download DEB/RPM: [![binary packages for Zammad stable](https://img.shields.io/badge/Branch-stable-blue.svg)](https://packager.io/gh/zammad/zammad/refs/stable)\n  [![binary packages for Zammad develop](https://img.shields.io/badge/Branch-develop-lightgrey.svg)](https://packager.io/gh/zammad/zammad/refs/develop)\n- License: [![AGPL license](https://img.shields.io/badge/License-AGPL%203.0-brightgreen.svg)](https://github.com/zammad/zammad/blob/develop/LICENSE)\n\n## Further Information\n\n- [Installing \u0026 Getting Started](https://docs.zammad.org)\n- [Screenshots](https://zammad.org/screenshots)\n- [Developer Manual](/doc/developer_manual/index.md)\n- [REST API](https://docs.zammad.org/en/latest/api/intro.html)\n- For reporting security vulnerabilities, please see [our security policy](SECURITY.md).\n- [Contributing](https://zammad.org/participate)\n\nThanks! ❤️ ❤️ ❤️\n\n Your Zammad Team\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzammad%2Fzammad","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzammad%2Fzammad","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzammad%2Fzammad/lists"}