{"id":3725808,"name":"github.com/googlecloudplatform/skaffold","ecosystem":"go","description":"","homepage":"https://github.com/googlecloudplatform/skaffold","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/googlecloudplatform/skaffold","keywords_array":[],"namespace":"github.com/googlecloudplatform","versions_count":137,"first_release_published_at":"2018-03-05T18:14:27.000Z","latest_release_published_at":"2023-08-11T14:45:24.000Z","latest_release_number":"v1.39.18","last_synced_at":"2026-07-21T16:34:53.387Z","created_at":"2022-04-11T13:39:05.761Z","updated_at":"2026-09-03T22:50:54.550Z","registry_url":"https://pkg.go.dev/github.com/googlecloudplatform/skaffold","install_command":"go get github.com/googlecloudplatform/skaffold","documentation_url":"https://pkg.go.dev/github.com/googlecloudplatform/skaffold#section-documentation","metadata":{},"repo_metadata":{"id":37390609,"uuid":"118654121","full_name":"GoogleContainerTools/skaffold","owner":"GoogleContainerTools","description":"Easy and Repeatable Kubernetes Development","archived":false,"fork":false,"pushed_at":"2026-09-02T07:38:52.000Z","size":178415,"stargazers_count":15891,"open_issues_count":906,"forks_count":1705,"subscribers_count":185,"default_branch":"main","last_synced_at":"2026-09-02T15:29:41.667Z","etag":null,"topics":["containers","developer-tools","docker","kubernetes"],"latest_commit_sha":null,"homepage":"https://skaffold.dev/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GoogleContainerTools.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":"ROADMAP.md","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2018-01-23T18:51:29.000Z","updated_at":"2026-09-02T10:24:49.000Z","dependencies_parsed_at":"2024-01-15T17:42:10.976Z","dependency_job_id":"96653ad1-7ace-4b6c-9ce1-65ae6b26bce9","html_url":"https://github.com/GoogleContainerTools/skaffold","commit_stats":{"total_commits":6718,"total_committers":433,"mean_commits":15.51501154734411,"dds":0.7750818696040488,"last_synced_commit":"63aeb7073b1fe0a3cf956bb3a292c32e7e3c3144"},"previous_names":["googlecloudplatform/skaffold"],"tags_count":213,"template":false,"template_full_name":null,"purl":"pkg:github/GoogleContainerTools/skaffold","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GoogleContainerTools","download_url":"https://codeload.github.com/GoogleContainerTools/skaffold/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/sbom","scorecard":{"id":58546,"data":{"date":"2025-08-10T06:36:53Z","repo":{"name":"github.com/GoogleContainerTools/skaffold","commit":"4ef420a8a5670824f0c1bf054a876eeed30a028e"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7,"checks":[{"name":"Maintained","score":10,"reason":"11 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:23","Info: jobLevel 'actions' permission set to 'read': .github/workflows/scorecards.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecards.yml:22","Info: topLevel permissions set to 'read-all': .github/workflows/codeql-analysis.yml:11","Info: topLevel permissions set to 'read-all': .github/workflows/integration-linux.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/linters-checks.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/scorecards.yml:11","Info: topLevel permissions set to 'read-all': .github/workflows/unit-tests-darwin.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/unit-tests-linux.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/unit-tests-windows.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/verify-examples.yml:10","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":6,"reason":"binaries present in source code","details":["Warn: binary detected: examples/jib-gradle/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: examples/jib-sync/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: integration/examples/jib-gradle/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: integration/examples/jib-sync/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'up-to-date branches' is required to merge on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":6,"reason":"4 out of the last 5 releases have a total of 4 signed artifacts.","details":["Info: signed release artifact: skaffold-darwin-amd64.sha256.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.16.1","Info: signed release artifact: skaffold-darwin-amd64.sha256.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.16.0","Info: signed release artifact: skaffold-darwin-amd64.sha256.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.15.0","Info: signed release artifact: skaffold-darwin-amd64.1.sig: https://github.com/GoogleContainerTools/skaffold/releases/tag/v2.14.2","Warn: release artifact v2.14.1 not signed: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/198652527","Warn: release artifact v2.16.1 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/226055925","Warn: release artifact v2.16.0 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/216817655","Warn: release artifact v2.15.0 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/210420193","Warn: release artifact v2.14.2 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/206884032","Warn: release artifact v2.14.1 does not have provenance: https://api.github.com/repos/GoogleContainerTools/skaffold/releases/198652527"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"CI-Tests","score":9,"reason":"29 out of 30 merged PRs checked by a CI test -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 29 contributing companies or organizations","details":["Info: found contributions from: Agoric, CodeStory, GoogleCloudPlatform, GoogleContainerTools, agoric, atlassian, baseup, buildpacks, chainguard-dev, codegroove.dev, docker, duke university, endojs, google, googlecloudplatform, googlers, internetitem, jenkins-x, kubeflow, media molecule, multi-factor-auth-users, sigstore, software-craftsmanship-new-york, spinnaker, standard-input, thesoul publishing, thiggle, vmware-tanzu, wolfi-dev"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-linux.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/integration-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters-checks.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/linters-checks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters-checks.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/linters-checks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecards.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/scorecards.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecards.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecards.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/scorecards.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-darwin.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-darwin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-darwin.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-darwin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-darwin.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-darwin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-linux.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-linux.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-windows.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-windows.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests-windows.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/unit-tests-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-examples.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/verify-examples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-examples.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/skaffold/verify-examples.yml/main?enable=pin","Warn: containerImage not pinned by hash: codelab/01_kpt-validate/resources/sample-app/php-redis/Dockerfile:15: pin your Docker image by updating php:5-apache to php:5-apache@sha256:0a40fd273961b99d8afe69a61a68c73c04bc0caa9de384d3b2dd9e7986eec86d","Warn: containerImage not pinned by hash: codelab/02_kpt-deploy/resources/sample-app/php-redis/Dockerfile:15: pin your Docker image by updating php:5-apache to php:5-apache@sha256:0a40fd273961b99d8afe69a61a68c73c04bc0caa9de384d3b2dd9e7986eec86d","Warn: containerImage not pinned by hash: codelab/03_buildpacks-runimage-override/base/Dockerfile:1: pin your Docker image by updating gcr.io/gcp-runtimes/ubuntu_18_0_4 to gcr.io/gcp-runtimes/ubuntu_18_0_4@sha256:a6aba56fdd9284d1b1397c7703203417bca3b518e78612783d199203c3cdf2fa","Warn: containerImage not pinned by hash: deploy/buildpacks/Dockerfile:15: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: deploy/cross/Dockerfile:15","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile:16","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile:19","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile:24","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:18","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:28","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:38","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:47","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:56","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:65","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:74","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:83","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:92","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:105","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:116","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.deps:154","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:19","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:27","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:38","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:48","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:57","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:66","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:79","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.lts:106","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.skaffold:2","Warn: containerImage not pinned by hash: deploy/skaffold/Dockerfile.skaffold:4: pin your Docker image by updating gcr.io/distroless/static-debian11 to gcr.io/distroless/static-debian11@sha256:1dbe426d60caed5d19597532a2d74c8056cd7b1674042b88f7328690b5ead8ed","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:16","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:28","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:34","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:40","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:50","Warn: containerImage not pinned by hash: deploy/webhook-v2/Dockerfile:56","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:16","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:28","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:34","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:40","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:50","Warn: containerImage not pinned by hash: deploy/webhook/Dockerfile:55","Warn: containerImage not pinned by hash: docs-v1/content/en/samples/builders/artifact-dependencies/Dockerfile.app:2","Warn: containerImage not pinned by hash: docs-v1/content/en/samples/builders/artifact-dependencies/Dockerfile.app:4","Warn: containerImage not pinned by hash: docs-v1/content/en/samples/builders/artifact-dependencies/Dockerfile.base:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: docs-v2/content/en/samples/builders/artifact-dependencies/Dockerfile.app:2","Warn: containerImage not pinned by hash: docs-v2/content/en/samples/builders/artifact-dependencies/Dockerfile.app:4","Warn: containerImage not pinned by hash: docs-v2/content/en/samples/builders/artifact-dependencies/Dockerfile.base:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/compose/Dockerfile:1","Warn: containerImage not pinned by hash: examples/compose/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/cross-platform-builds/Dockerfile:1","Warn: containerImage not pinned by hash: examples/cross-platform-builds/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/custom-buildx/Dockerfile:6","Warn: containerImage not pinned by hash: examples/custom-buildx/Dockerfile:18: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/custom-tests/Dockerfile:1","Warn: containerImage not pinned by hash: examples/custom-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/docker-deploy/bert/Dockerfile:1","Warn: containerImage not pinned by hash: examples/docker-deploy/bert/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/docker-deploy/ernie/Dockerfile:1","Warn: containerImage not pinned by hash: examples/docker-deploy/ernie/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/gcb-kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: examples/gcb-kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/generate-pipeline/Dockerfile:1","Warn: containerImage not pinned by hash: examples/generate-pipeline/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/getting-started-kustomize/app/Dockerfile:1","Warn: containerImage not pinned by hash: examples/getting-started-kustomize/app/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/getting-started/Dockerfile:1","Warn: containerImage not pinned by hash: examples/getting-started/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/google-cloud-build/Dockerfile:1","Warn: containerImage not pinned by hash: examples/google-cloud-build/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:1","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/cloud-spanner/Dockerfile:1: pin your Docker image by updating google/cloud-sdk to google/cloud-sdk@sha256:ff2b1f2d955b296dbee2b90b3fcc4510f7b94c6c07f63eb565d2d656b7dae49b","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/grpc-e2e-tests/service/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/helm-deployment-dependencies/Dockerfile:1: pin your Docker image by updating nginx:stable to nginx:stable@sha256:7935b9ee80fe4076ce8ca637fe7bb0c7a1268e2bd854032a0563ecc96bfa6747","Warn: containerImage not pinned by hash: examples/helm-deployment/Dockerfile:1","Warn: containerImage not pinned by hash: examples/helm-deployment/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/helm-render/Dockerfile:1","Warn: containerImage not pinned by hash: examples/helm-render/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: examples/hot-reload/node/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/hot-reload/python/Dockerfile:1: pin your Docker image by updating python:3.9-alpine to python:3.9-alpine@sha256:372f3cfc1738ed91b64c7d36a7a02d5c3468ec1f60c906872c3fd346dda8cbbb","Warn: containerImage not pinned by hash: examples/kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: examples/kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/lifecycle-hooks/Dockerfile:1","Warn: containerImage not pinned by hash: examples/lifecycle-hooks/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: examples/microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: examples/microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: examples/microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: examples/multi-config-microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multi-config-microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: examples/multiple-renderers/backend/src/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multiple-renderers/backend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/multiple-renderers/frontend/src/Dockerfile:2","Warn: containerImage not pinned by hash: examples/multiple-renderers/frontend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: examples/nodejs/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/profile-patches/base-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profile-patches/base-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profile-patches/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profile-patches/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profile-patches/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profile-patches/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profiles/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profiles/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/profiles/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: examples/profiles/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/react-reload-docker/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/react-reload/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/ruby/backend/Dockerfile:1: pin your Docker image by updating ruby:2.7 to ruby:2.7@sha256:2347de892e419c7160fc21dec721d5952736909f8c3fbb7f84cb4a07aaf9ce7d","Warn: containerImage not pinned by hash: examples/simple-artifact-dependency/app/Dockerfile:2","Warn: containerImage not pinned by hash: examples/simple-artifact-dependency/app/Dockerfile:10","Warn: containerImage not pinned by hash: examples/simple-artifact-dependency/base/Dockerfile:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/structure-tests/Dockerfile:1","Warn: containerImage not pinned by hash: examples/structure-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/tagging-with-environment-variables/Dockerfile:1","Warn: containerImage not pinned by hash: examples/tagging-with-environment-variables/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: examples/typescript/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: examples/using-env-file/Dockerfile:1","Warn: containerImage not pinned by hash: examples/using-env-file/Dockerfile:7: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: hack/proto/Dockerfile:15","Warn: containerImage not pinned by hash: hack/proto/Dockerfile:94","Warn: containerImage not pinned by hash: integration/examples/compose/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/compose/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/cross-platform-builds/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/cross-platform-builds/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/custom-buildx/Dockerfile:6","Warn: containerImage not pinned by hash: integration/examples/custom-buildx/Dockerfile:18: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/custom-tests/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/custom-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/bert/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/bert/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/ernie/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/docker-deploy/ernie/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/gcb-kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/gcb-kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/generate-pipeline/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/generate-pipeline/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/getting-started-kustomize/app/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/getting-started-kustomize/app/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/getting-started/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/getting-started/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/google-cloud-build/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/google-cloud-build/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/cloud-spanner-bootstrap/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/cloud-spanner/Dockerfile:1: pin your Docker image by updating google/cloud-sdk to google/cloud-sdk@sha256:ff2b1f2d955b296dbee2b90b3fcc4510f7b94c6c07f63eb565d2d656b7dae49b","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/grpc-e2e-tests/service/Dockerfile:9: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/helm-deployment-dependencies/Dockerfile:1: pin your Docker image by updating nginx:stable to nginx:stable@sha256:7935b9ee80fe4076ce8ca637fe7bb0c7a1268e2bd854032a0563ecc96bfa6747","Warn: containerImage not pinned by hash: integration/examples/helm-deployment/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/helm-deployment/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/helm-render/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/helm-render/Dockerfile:9: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98","Warn: containerImage not pinned by hash: integration/examples/hot-reload/node/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/hot-reload/python/Dockerfile:1: pin your Docker image by updating python:3.9-alpine to python:3.9-alpine@sha256:372f3cfc1738ed91b64c7d36a7a02d5c3468ec1f60c906872c3fd346dda8cbbb","Warn: containerImage not pinned by hash: integration/examples/kaniko/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/kaniko/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/lifecycle-hooks/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/lifecycle-hooks/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/base/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-app/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-app/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-web/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multi-config-microservices/leeroy-web/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/backend/src/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/backend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/frontend/src/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/multiple-renderers/frontend/src/Dockerfile:20: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:4f6e739881403e7d50f52a4e574c4e3c88266031fd555303ee2f1ba262523d6a","Warn: containerImage not pinned by hash: integration/examples/nodejs/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/profile-patches/base-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/base-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profile-patches/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profiles/hello-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profiles/hello-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/profiles/world-service/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/profiles/world-service/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/react-reload-docker/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/react-reload/app/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/ruby/backend/Dockerfile:1: pin your Docker image by updating ruby:2.7 to ruby:2.7@sha256:2347de892e419c7160fc21dec721d5952736909f8c3fbb7f84cb4a07aaf9ce7d","Warn: containerImage not pinned by hash: integration/examples/simple-artifact-dependency/app/Dockerfile:2","Warn: containerImage not pinned by hash: integration/examples/simple-artifact-dependency/app/Dockerfile:10","Warn: containerImage not pinned by hash: integration/examples/simple-artifact-dependency/base/Dockerfile:1: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/structure-tests/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/structure-tests/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/tagging-with-environment-variables/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/tagging-with-environment-variables/Dockerfile:9: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: integration/examples/typescript/backend/Dockerfile:1: pin your Docker image by updating node:14.9-alpine to node:14.9-alpine@sha256:106819c4dcb57afe4763eea82cbde8fa03f71cbc9e0944f6a32ef31cfb206e65","Warn: containerImage not pinned by hash: integration/examples/using-env-file/Dockerfile:1","Warn: containerImage not pinned by hash: integration/examples/using-env-file/Dockerfile:7: pin your Docker image by updating alpine:3 to alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: downloadThenRun not pinned by hash: deploy/skaffold/Dockerfile.deps:139","Warn: npmCommand not pinned by hash: deploy/webhook-v2/Dockerfile:42","Warn: npmCommand not pinned by hash: deploy/webhook-v2/Dockerfile:45","Warn: npmCommand not pinned by hash: deploy/webhook/Dockerfile:42","Warn: npmCommand not pinned by hash: deploy/webhook/Dockerfile:45","Warn: npmCommand not pinned by hash: examples/hot-reload/node/Dockerfile:14","Warn: pipCommand not pinned by hash: examples/hot-reload/python/Dockerfile:3","Warn: pipCommand not pinned by hash: examples/hot-reload/python/Dockerfile:16","Warn: npmCommand not pinned by hash: examples/nodejs/backend/Dockerfile:14","Warn: npmCommand not pinned by hash: examples/react-reload-docker/app/Dockerfile:9","Warn: npmCommand not pinned by hash: examples/react-reload/app/Dockerfile:9","Warn: npmCommand not pinned by hash: examples/typescript/backend/Dockerfile:14","Warn: npmCommand not pinned by hash: integration/examples/hot-reload/node/Dockerfile:14","Warn: pipCommand not pinned by hash: integration/examples/hot-reload/python/Dockerfile:3","Warn: pipCommand not pinned by hash: integration/examples/hot-reload/python/Dockerfile:16","Warn: npmCommand not pinned by hash: integration/examples/nodejs/backend/Dockerfile:14","Warn: npmCommand not pinned by hash: integration/examples/react-reload-docker/app/Dockerfile:9","Warn: npmCommand not pinned by hash: integration/examples/react-reload/app/Dockerfile:9","Warn: npmCommand not pinned by hash: integration/examples/typescript/backend/Dockerfile:14","Warn: goCommand not pinned by hash: vendor/github.com/agext/levenshtein/test.sh:5","Warn: goCommand not pinned by hash: vendor/github.com/go-git/go-git/v5/oss-fuzz.sh:20","Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: vendor/github.com/pelletier/go-toml/benchmark.sh:10","Info:   0 out of  23 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of 202 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   0 out of  14 npmCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:  10 out of  14 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"46 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-cx7f-g6mp-7hqm","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-w3c8-7r8f-9jp8","Warn: Project is vulnerable to: GHSA-4grg-w6v8-c28g","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2025-3488 / GHSA-6v2p-p543-phr9","Warn: Project is vulnerable to: GO-2023-1495 / GHSA-fxg5-wq6x-vr4w","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GO-2023-2153 / GHSA-m425-mq94-257g / GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2022-1059 / GHSA-69ch-w2m2-3vjp","Warn: Project is vulnerable to: GO-2024-2611 / GHSA-8r3f-844c-mc37","Warn: Project is vulnerable to: GO-2025-3770","Warn: Project is vulnerable to: GO-2025-3787 / GHSA-fv92-fjc5-jj9h","Warn: Project is vulnerable to: PYSEC-2018-66 / GHSA-562c-5r94-xh97","Warn: Project is vulnerable to: PYSEC-2019-179 / GHSA-5wv5-4vpf-pj6m","Warn: Project is vulnerable to: PYSEC-2023-62 / GHSA-m2qf-hxjv-5gpq"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T01:13:47.349Z","repository_id":37390609,"created_at":"2025-08-15T01:13:47.349Z","updated_at":"2025-08-15T01:13:47.349Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019062,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-09-03T22:50:54.550Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":null,"forks_count":null,"average":8.172500131868823},"purl":"pkg:golang/github.com/googlecloudplatform/skaffold","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/googlecloudplatform/skaffold","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/googlecloudplatform/skaffold","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/googlecloudplatform/skaffold/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-03T19:57:47.660Z","issues_count":395,"pull_requests_count":855,"avg_time_to_close_issue":10248369.096296296,"avg_time_to_close_pull_request":2382396.340486409,"issues_closed_count":135,"pull_requests_closed_count":699,"pull_request_authors_count":101,"issue_authors_count":270,"avg_comments_per_issue":2.0936708860759494,"avg_comments_per_pull_request":1.0421052631578946,"merged_pull_requests_count":498,"bot_issues_count":3,"bot_pull_requests_count":338,"past_year_issues_count":13,"past_year_pull_requests_count":67,"past_year_avg_time_to_close_issue":2596774.0,"past_year_avg_time_to_close_pull_request":1840201.3421052631,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":38,"past_year_pull_request_authors_count":19,"past_year_issue_authors_count":12,"past_year_avg_comments_per_issue":1.4615384615384615,"past_year_avg_comments_per_pull_request":0.6417910447761194,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":36,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleContainerTools%2Fskaffold/issues","maintainers":[{"login":"plumpy","count":79,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/plumpy"},{"login":"briandealwis","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/briandealwis"},{"login":"tejal29","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tejal29"},{"login":"Abrahami2","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Abrahami2"},{"login":"halvards","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/halvards"},{"login":"ChrisGe4","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ChrisGe4"},{"login":"gsquared94","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsquared94"},{"login":"dhodun","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dhodun"}],"active_maintainers":[{"login":"Abrahami2","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Abrahami2"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgooglecloudplatform%2Fskaffold/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgooglecloudplatform%2Fskaffold/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgooglecloudplatform%2Fskaffold/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgooglecloudplatform%2Fskaffold/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgooglecloudplatform%2Fskaffold/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgooglecloudplatform%2Fskaffold/codemeta","maintainers":[]}