{"id":5802670,"name":"Azure/build-vm-image","ecosystem":"actions","description":"Create custom virtual machine images that contain artifacts built in CI workflows","homepage":null,"licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/Azure/build-vm-image","keywords_array":[],"namespace":"Azure","versions_count":3,"first_release_published_at":"2021-08-30T12:25:59.000Z","latest_release_published_at":"2022-11-23T17:17:53.000Z","latest_release_number":"v0.1.1","last_synced_at":"2026-09-04T23:37:19.517Z","created_at":"2023-01-04T14:00:05.502Z","updated_at":"2026-09-05T12:07:55.740Z","registry_url":"https://github.com/Azure/build-vm-image","install_command":null,"documentation_url":null,"metadata":{"name":"Build Azure Virtual Machine Image","description":"Create custom virtual machine images that contain artifacts built in CI workflows","inputs":{"location":{"description":"This is the Azure region in which the Image Builder will run."},"resource-group-name":{"description":"This is the Resource Group where the temporary Imagebuilder Template resource will be created.","required":true},"image-builder-template-name":{"description":"The name of the image builder template resource to be used for creating and running the Image builder service."},"build-timeout-in-minutes":{"description":"The value is an integer which is used as timeout in minutes for running the image build.","default":240},"vm-size":{"description":"You can override the VM size, from the default value i.e. Standard_D1_v2.","default":"Standard_D1_v2"},"managed-identity":{"description":"The identity that will be used to do the role assignment and resource creation"},"source-image-type":{"description":"[ PlatformImage | SharedImageGallery | ManagedImage ]","default":"PlatformImage"},"source-os-type":{"description":"OS types supported: [ linux | windows ].","required":true},"source-image":{"description":"Value of source-image supported by Azure Image Builder."},"customizer-source":{"description":"This takes the path to a directory or a file in the runner. By default, it points to the default download directory of the github runner."},"customizer-script":{"description":"The customer can enter multi inline powershell or shell commands and use variables to point to directories inside the downloaded location."},"customizer-windows-update":{"description":"The value is boolean and set to false by default. This value is for Windows images only, the image builder will run Windows Update at the end of the customizations and also handle the reboots it requires.","default":false},"dist-type":{"description":"ManagedImage | SharedImageGallery | VHD","default":"ManagedImage"},"dist-resource-id":{"description":"Image Resource Id to be created by AIB"},"dist-location":{"description":"location of Image created by AIB"},"run-output-name":{"description":"Every Image builder run is identified with a unique run id."},"dist-image-tags":{"description":"The values set will be used to set the user defined tags on the custom image artifact created."}},"outputs":{"imagebuilder-run-status":{"description":"This value of this output will be the value of Image builder Run status set to either Succeeded or Failed based on the runState returned by Azure Image Builder."},"run-output-name":{"description":"The action emits output value run-output-name which can be used to get the details of the Image Builder Run."},"custom-image-uri":{"description":"Upon successful completion, The github action emits the URI or resource id of the Image distributed."}},"runs":{"using":"node12","main":"lib/index.js"},"default_branch":"master","path":null},"repo_metadata":{"id":41242013,"uuid":"294410012","full_name":"Azure/build-vm-image","owner":"Azure","description":"Github action to create custom virtual machine images that contain artifacts built in CI workflows","archived":false,"fork":false,"pushed_at":"2023-08-10T09:59:32.000Z","size":16518,"stargazers_count":36,"open_issues_count":10,"forks_count":30,"subscribers_count":6,"default_branch":"master","last_synced_at":"2026-08-03T12:46:13.255Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Azure.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-09-10T12:57:12.000Z","updated_at":"2026-07-09T09:03:26.000Z","dependencies_parsed_at":"2024-06-20T00:22:15.291Z","dependency_job_id":null,"html_url":"https://github.com/Azure/build-vm-image","commit_stats":{"total_commits":32,"total_committers":12,"mean_commits":"2.6666666666666665","dds":0.625,"last_synced_commit":"49519e8b4a718414222fa83243bc6bc019a3edf1"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/Azure/build-vm-image","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Azure","download_url":"https://codeload.github.com/Azure/build-vm-image/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/sbom","scorecard":{"id":18914,"data":{"date":"2025-08-11","repo":{"name":"github.com/Azure/build-vm-image","commit":"49519e8b4a718414222fa83243bc6bc019a3edf1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.5,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/defaultLabels.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":3,"reason":"Found 6/20 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/defaultLabels.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/Azure/build-vm-image/defaultLabels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/defaultLabels.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/Azure/build-vm-image/defaultLabels.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":1,"reason":"branch protection is not maximal on development and all release branches","details":["Warn: branch protection not enabled for branch 'releases/v0'","Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Warn: 'stale review dismissal' is disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 20 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"30 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-mfwh-5m23-j46w","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-jg8v-48h5-wgxg","Warn: Project is vulnerable to: GHSA-36fh-84j7-cv5h","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-pc58-wgmc-hfjr","Warn: Project is vulnerable to: GHSA-vvv8-xw5f-3f88","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9","Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-558p-m34m-vpmq","Warn: Project is vulnerable to: GHSA-cf4h-3jhx-xvhq","Warn: Project is vulnerable to: GHSA-qgmg-gppg-76g5","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T16:22:17.542Z","repository_id":41242013,"created_at":"2025-08-14T16:22:17.542Z","updated_at":"2025-08-14T16:22:17.542Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37022173,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"Azure","name":"Microsoft Azure","uuid":"6844498","kind":"organization","description":"APIs, SDKs and open source projects from Microsoft Azure","email":null,"website":"https://docs.microsoft.com/en-us/azure/","location":"United States of America","twitter":"Azure","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6844498?v=4","repositories_count":2270,"last_synced_at":"2026-09-05T00:22:45.837Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/Azure","funding_links":[],"total_stars":207710,"followers":15277,"following":0,"created_at":"2022-11-02T16:20:18.910Z","updated_at":"2026-09-05T00:22:45.968Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Azure","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Azure/repositories"},"tags":[{"name":"v0","sha":"ff9f3c0de433bc6fa19ec82b45749f633fd7b362","kind":"tag","published_at":"2022-11-23T17:22:31.000Z","download_url":"https://codeload.github.com/Azure/build-vm-image/tar.gz/v0","html_url":"https://github.com/Azure/build-vm-image/releases/tag/v0","dependencies_parsed_at":"2026-08-18T05:17:58.948Z","dependency_job_id":null,"purl":"pkg:github/Azure/build-vm-image@v0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/tags/v0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/tags/v0/manifests"},{"name":"v0.1.1","sha":"ff9f3c0de433bc6fa19ec82b45749f633fd7b362","kind":"commit","published_at":"2022-11-23T17:17:53.000Z","download_url":"https://codeload.github.com/Azure/build-vm-image/tar.gz/v0.1.1","html_url":"https://github.com/Azure/build-vm-image/releases/tag/v0.1.1","dependencies_parsed_at":"2023-06-01T10:47:09.051Z","dependency_job_id":null,"purl":"pkg:github/Azure/build-vm-image@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"91ebae8b51d4e47af650cf52c7aeb2b67250c635","kind":"commit","published_at":"2021-08-30T12:25:59.000Z","download_url":"https://codeload.github.com/Azure/build-vm-image/tar.gz/v0.1.0","html_url":"https://github.com/Azure/build-vm-image/releases/tag/v0.1.0","dependencies_parsed_at":"2023-05-31T16:25:40.777Z","dependency_job_id":null,"purl":"pkg:github/Azure/build-vm-image@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-05T12:07:55.740Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":24.750435747108224,"dependent_packages_count":0.0,"stargazers_count":4.988115987957534,"forks_count":2.6239898589763904,"docker_downloads_count":null,"average":8.090635398510537},"purl":"pkg:githubactions/Azure/build-vm-image","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/actions/Azure/build-vm-image","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/actions/Azure/build-vm-image","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/actions/Azure/build-vm-image/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T15:26:02.961Z","issues_count":11,"pull_requests_count":16,"avg_time_to_close_issue":14006670.166666666,"avg_time_to_close_pull_request":2589408.8571428573,"issues_closed_count":6,"pull_requests_closed_count":14,"pull_request_authors_count":11,"issue_authors_count":10,"avg_comments_per_issue":2.1818181818181817,"avg_comments_per_pull_request":1.75,"merged_pull_requests_count":12,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":1,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fbuild-vm-image/issues","maintainers":[{"login":"raiyanalam","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/raiyanalam"},{"login":"larryclaman","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/larryclaman"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/github%20actions/packages/Azure%2Fbuild-vm-image/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/github%20actions/packages/Azure%2Fbuild-vm-image/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/github%20actions/packages/Azure%2Fbuild-vm-image/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/github%20actions/packages/Azure%2Fbuild-vm-image/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/github%20actions/packages/Azure%2Fbuild-vm-image/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/github%20actions/packages/Azure%2Fbuild-vm-image/codemeta","maintainers":[]}