ArmisSecurity / armis-cli

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 17 direkte und 36 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 53 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 0 tragen bekannte Advisories, davon 0 direkte.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 14105,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 2677881,
        "Shell": 17052,
        "Makefile": 3573,
        "PowerShell": 11644
      },
      "pushed_at": "2026-07-27T16:11:20Z",
      "created_at": "2025-10-12T01:53:19Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-21T14:41:19Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "armis.com",
      "name": "Armis, Inc.",
      "type": "Organization",
      "login": "ArmisSecurity",
      "company": null,
      "location": "United States of America",
      "followers": 66,
      "avatar_url": "https://avatars.githubusercontent.com/u/32813597?v=4",
      "created_at": "2017-10-15T11:28:25Z",
      "is_verified": null,
      "public_repos": 31,
      "account_age_days": 3207
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.20.0",
          "kind": "minor",
          "published_at": "2026-07-16T11:21:40Z"
        },
        {
          "tag": "v1.19.0",
          "kind": "minor",
          "published_at": "2026-07-15T08:59:35Z"
        },
        {
          "tag": "v1.18.0",
          "kind": "minor",
          "published_at": "2026-07-07T15:10:14Z"
        },
        {
          "tag": "v1.17.0",
          "kind": "minor",
          "published_at": "2026-06-30T13:26:38Z"
        },
        {
          "tag": "v1.16.0",
          "kind": "minor",
          "published_at": "2026-06-25T14:14:52Z"
        },
        {
          "tag": "v1.15.0",
          "kind": "minor",
          "published_at": "2026-06-22T22:48:27Z"
        },
        {
          "tag": "v1.14.0",
          "kind": "minor",
          "published_at": "2026-06-21T10:54:09Z"
        },
        {
          "tag": "v1.13.0",
          "kind": "minor",
          "published_at": "2026-06-16T10:04:46Z"
        },
        {
          "tag": "v1.12.0",
          "kind": "minor",
          "published_at": "2026-06-10T09:42:35Z"
        },
        {
          "tag": "v1.11.1",
          "kind": "patch",
          "published_at": "2026-06-08T16:16:02Z"
        },
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2026-06-08T12:27:20Z"
        },
        {
          "tag": "v1.10.2",
          "kind": "patch",
          "published_at": "2026-05-28T10:32:48Z"
        },
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2026-05-28T07:22:11Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2026-05-27T08:48:51Z"
        },
        {
          "tag": "v1.9.4",
          "kind": "patch",
          "published_at": "2026-05-25T15:42:35Z"
        },
        {
          "tag": "v1.9.3",
          "kind": "patch",
          "published_at": "2026-05-25T12:31:17Z"
        },
        {
          "tag": "v1.9.2",
          "kind": "patch",
          "published_at": "2026-05-25T09:44:22Z"
        },
        {
          "tag": "v1.9.1",
          "kind": "patch",
          "published_at": "2026-05-24T09:07:45Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2026-05-21T09:39:07Z"
        },
        {
          "tag": "v1.8.4",
          "kind": "patch",
          "published_at": "2026-05-18T12:15:31Z"
        },
        {
          "tag": "v1.8.3",
          "kind": "patch",
          "published_at": "2026-05-13T13:19:00Z"
        },
        {
          "tag": "v1.8.2",
          "kind": "patch",
          "published_at": "2026-05-13T10:00:39Z"
        },
        {
          "tag": "v1.8.1",
          "kind": "patch",
          "published_at": "2026-05-12T08:04:06Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2026-05-11T10:27:23Z"
        },
        {
          "tag": "v1.7.0",
          "kind": "minor",
          "published_at": "2026-05-06T08:13:39Z"
        },
        {
          "tag": "v1.6.1",
          "kind": "patch",
          "published_at": "2026-04-28T15:23:04Z"
        },
        {
          "tag": "v1.6.0",
          "kind": "minor",
          "published_at": "2026-04-22T19:30:55Z"
        },
        {
          "tag": "v1.5.0",
          "kind": "minor",
          "published_at": "2026-04-13T20:28:36Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2026-03-15T13:30:19Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2026-03-08T14:44:10Z"
        },
        {
          "tag": "v1.2.1",
          "kind": "patch",
          "published_at": "2026-02-26T10:06:43Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-02-23T10:41:25Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-02-16T08:47:13Z"
        },
        {
          "tag": "v1.0.7",
          "kind": "patch",
          "published_at": "2026-02-03T08:18:03Z"
        },
        {
          "tag": "v1.0.6",
          "kind": "patch",
          "published_at": "2026-02-01T14:11:26Z"
        },
        {
          "tag": "v1.0.5",
          "kind": "patch",
          "published_at": "2026-01-18T14:16:56Z"
        },
        {
          "tag": "v1.0.4",
          "kind": "patch",
          "published_at": "2026-01-15T12:44:25Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2026-01-13T12:45:31Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2026-01-07T16:05:58Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-01-06T16:15:31Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-01-05T17:59:32Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2025-12-22T01:06:40Z"
        },
        {
          "tag": "v0.1.6-test",
          "kind": "prerelease",
          "published_at": "2025-12-22T00:51:32Z"
        },
        {
          "tag": "v0.1.5-test",
          "kind": "prerelease",
          "published_at": "2025-12-22T00:40:26Z"
        },
        {
          "tag": "v0.1.3-test",
          "kind": "prerelease",
          "published_at": "2025-12-22T00:29:50Z"
        },
        {
          "tag": "v0.1.4-slsa-test",
          "kind": "prerelease",
          "published_at": "2025-12-21T23:51:09Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2025-12-21T21:15:53Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "9d9b76a90cdd32853f8b0c3747b2f29c4c4888d8",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.20.0 (#282)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-16T11:16:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "856c97f72a35717fff199aed649911a09bed41c4",
          "body": "…1157] (#281)\n\n* fix(scan): close temp tarball handle before docker/podman save [PPSC-1157]\n\nOn Windows, docker save/podman save could exit 0 while writing nothing\nto the output tarball because the CLI kept its own handle open on the\ntemp file (from os.CreateTemp) for the entire scan duration while \n[…]\n review feedback\n\n- Only capture saveStart when debug mode is on, avoiding an unused\n  time.Now() call on the hot path.\n- Fix doc comment backtick span split across lines on\n  validateExportedTarball.",
          "is_bot": false,
          "headline": "fix(scan): close temp tarball handle before docker/podman save [PPSC-…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-16T11:06:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e2e9898163b21109e724dc59ba2dc68546c60836",
          "body": "…xt (#280)\n\n* chore(PPSC-1153): clear code-scanning FPs, bump golang.org/x/net and x/text\n\nAdds armis:ignore directives on the actual write/parse sinks (CWE-22 in\nsbom.go, CWE-770 in scan_repo.go) where the classifier attributed the\nfinding to a different line than the existing suppression covered.\n\n[…]\nnow explains why the scanner flags this line despite no bound being\nneeded here, and the ParseFileList suppression drops the hardcoded\nline-number reference that would drift out of sync with the code.",
          "is_bot": false,
          "headline": "[PPSC-1153] chore(scan): clear code-scanning FPs, bump x/net and x/te…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-16T10:10:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c5381b5782ffc2901498a290a9e011f5d6ac30a",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.19.0 (#279)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-15T08:54:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2617d3afe543f12ea35acdfa17806f813e5bc5a",
          "body": "… (#276)\n\n* feat(PPSC-1136): add scan sbom-cpe command for CPE→NVD SBOM scans\n\nAdds `armis-cli scan sbom-cpe <path>` — uploads a CycloneDX asset SBOM\n(single file, directory, or pre-built tar.gz) and drives it through the\nbackend's new artifact_type=sbom-cpe scan flow. Findings appear in the\nstandar\n[…]\n.json relative\n  to cwd).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n* Fix linting issues\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(PPSC-1136): unify scan sbom — one command for CPE and purl SBOMs…",
          "author_name": "khyati-crest",
          "author_login": "khyati-crest",
          "committed_at": "2026-07-15T08:29:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e83f9d59c8479cf2dda17b2906df2fd2fbd09586",
          "body": "… [PPSC-1150] (#278)\n\n* feat(install): add `install knowledge` for the Armis Knowledge plugin\n\nAdd `armis-cli install knowledge` and `uninstall knowledge` to install the\nArmis Knowledge plugin for Claude Code. Drives the official `claude` CLI\n(plugin marketplace add + install) rather than hand-writi\n[…]\n can't false-positive inside a skills line.\n- Extract --variant parsing and --dev→env mapping into shared pure helpers\n  and add command-level + helper unit tests for both subcommands.\n\nRefs PPSC-1150",
          "is_bot": false,
          "headline": "feat(install): add `install knowledge` for the Armis Knowledge plugin…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-15T08:26:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d189f17f4e7dac76e8aa44a3170f3035e2ed2ef",
          "body": "git's default --name-only output C-quotes filenames containing control\ncharacters (newline, tab, CR) and packs them onto one line, so newline\nsplitting silently dropped changed files with such names from --changed\nscans while other changed files still uploaded. Switch all git change\ndetection to -z (NUL-delimited, unquoted) output and parse accordingly.",
          "is_bot": false,
          "headline": "fix(scan): use NUL-delimited git output to fix scan-scope bypass (#277)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-14T15:14:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1adf7c05ab02ce012382fc128f2c82f037751262",
          "body": "Bumps [github.com/schollz/progressbar/v3](https://github.com/schollz/progressbar) from 3.19.0 to 3.19.1.\n- [Release notes](https://github.com/schollz/progressbar/releases)\n- [Commits](https://github.com/schollz/progressbar/compare/v3.19.0...v3.19.1)\n\n---\nupdated-dependencies:\n- dependency-name: gith\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/schollz/progressbar/v3 (#264)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T12:44:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "52071265c645130ba9f40ea87a965a042e4c72f2",
          "body": "Add `armis-cli scan sbom <path>` which uploads a pre-existing SBOM\nartifact (artifact_type=sbom, vex_generate=true) and downloads the\nOpenVEX document the backend generates from it.\n\n- internal/scan/sbom/sbom.go: scan driver mirroring the repo scanner.\n  Accepts a single SBOM file (.json/.xml), a di\n[…]\ne degrade gracefully.\n- internal/testutil/mockapi.go: mock /ingest/results + fake VEX download\n  endpoint gated on new VEXContent config field.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add scan sbom command for SBOM-to-VEX generation (#269)",
          "author_name": "tnachan",
          "author_login": "tnachan",
          "committed_at": "2026-07-14T07:57:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2e1a6bfafec977fe50173f15fc8ab4d0e920d6ea",
          "body": "* fix(ci): pin PR scan logo URLs to main instead of GITHUB_WORKFLOW_REF\n\nGITHUB_WORKFLOW_REF resolves to the ephemeral refs/pull/N/merge ref on\npull_request-triggered runs, which raw.githubusercontent.com cannot\nserve, causing the Armis AppSec logo in scan-result PR comments to\n404. The logo is a static asset, so pin the URL to main instead of\nderiving it from the triggering ref.\n\n* docs: fix comment grammar per review feedback",
          "is_bot": false,
          "headline": "[PPSC-1141] fix(ci): pin PR scan logo URL to main (#270)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-12T12:56:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4323cf9397c7d29143d91ac40929b0402c7550cb",
          "body": "* fix(api): allow HTTP for local S3 endpoints in development\n\nAdd ARMIS_LOCAL_S3_ENDPOINT support for mock S3 services in local dev.\nOnly enabled when API URL is localhost or RFC 1918 private IP.\n\n- Add Client.localS3Hosts allowlist and WithLocalS3Hosts() option\n- Add isLocalDevelopment() to detect \n[…]\nocal S3 endpoint support (WithLocalS3Hosts from ARMIS_LOCAL_S3_ENDPOINT)\n- isLocalDevelopment() detection for RFC 1918 private IPs\n\n---------\n\nCo-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(PPSC-1116): allow HTTP urls for local development (#267)",
          "author_name": "Rushabh Thakkar",
          "author_login": "rushabh-thakkar-17",
          "committed_at": "2026-07-09T12:04:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2e1dc850ba99ad2750d27f9f93463fcb7b9b9d5f",
          "body": "* PPSC-1043 respect detected region in IdP client\n\n* PPSC-1043 sso setup docs\n\n* Clean env vars for tests to avoid interference with developer machine env vars\n\n* reference new document from readme, deduplicate\n\n* update changelog",
          "is_bot": false,
          "headline": "PPSC-1043: IT Admin SSO setup guide + streamlined auth setup (#268)",
          "author_name": "dmitrysmirnov-armis",
          "author_login": "dmitrysmirnov-armis",
          "committed_at": "2026-07-08T12:44:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87b5bd65522b4c94e48c6941c64efb9269c24d53",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.18.0 (#266)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-07T15:04:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2beb6ee51b81b4fdf72a2377d620a27826d0fef5",
          "body": "… (#208)\n\nBumps [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) from 0.0.23 to 0.0.24.\n- [Commits](https://github.com/mattn/go-runewidth/compare/v0.0.23...v0.0.24)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-runewidth\n  dependency-version: 0.0.24\n  depend\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/mattn/go-runewidth from 0.0.23 to 0.0.24…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T14:49:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a7cb9e8eb8595ff4ef8c5960fff995f552228f90",
          "body": "Bumps [golang.org/x/term](https://github.com/golang/term) from 0.43.0 to 0.44.0.\n- [Commits](https://github.com/golang/term/compare/v0.43.0...v0.44.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/term\n  dependency-version: 0.44.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 (#223)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T14:48:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5c2201cffe0efbcf472873a18c4b998f11de0ed",
          "body": "…0 (#263)\n\nBumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) from 3.4.0 to 3.5.0.\n- [Release notes](https://github.com/Masterminds/semver/releases)\n- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/Masterminds/s\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T14:40:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59f08a8ccd6a903c5c292729a6b7ea734fe2fe84",
          "body": "Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.45.0 to 0.46.0.\n- [Commits](https://github.com/golang/sys/compare/v0.45.0...v0.46.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sys\n  dependency-version: 0.46.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 (#224)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T14:39:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a265737cebd475de274d7eeb052a8ee7693546c2",
          "body": "…265)\n\n* fix(supply-chain): raise yarn scanner buffer cap; document nil-safety in syntax formatter\n\nAligns parseYarnClassic's bufio.Scanner with pip.go/gradle.go by raising the\ntoken cap to maxLockfileSize, so a yarn.lock line with a long resolved URL or\nintegrity hash doesn't hard-fail parsing. Als\n[…]\nlse positives (already-suppressed findings re-surfaced by the scanner's\nnon-determinism, or first-party/non-executed CI references).\n\n* test(supply-chain): add regression test for long yarn.lock lines",
          "is_bot": false,
          "headline": "[PPSC-1123] fix(supply-chain): raise yarn buffer cap; suppress FPs (#…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-07T14:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "138108f5fc572033a88051a0c262d6ff0baa2969",
          "body": "…(#262)\n\nPins every third-party action `uses:` ref across the workflow files to a\n40-char commit SHA (with a trailing `# vX` comment) instead of a mutable\ntag. A moved tag is a supply-chain foothold — whoever controls the action\nrepo can repoint the tag to malicious code, and PR-triggered workflows \n[…]\nhe\n  tag and refuses to run when called by SHA). Documented inline.\n\nDependabot already tracks the github-actions ecosystem and understands\nSHA pins with `# vX` comments, so it will keep these bumped.",
          "is_bot": false,
          "headline": "chore(ci): pin third-party GitHub Actions to commit SHAs (PPSC-1111) …",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-06T13:12:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f4769a84b9ae9baa24271117c6dc08a1dd1bff99",
          "body": "….0 (#234)\n\nBumps [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma) from 2.24.1 to 2.27.0.\n- [Release notes](https://github.com/alecthomas/chroma/releases)\n- [Commits](https://github.com/alecthomas/chroma/compare/v2.24.1...v2.27.0)\n\n---\nupdated-dependencies:\n- dependency-name: \n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/alecthomas/chroma/v2 from 2.24.1 to 2.27…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T07:56:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6972cfbe2609af12d36909ddd102717c4fcd81f5",
          "body": "… TLS trust (#261)\n\n* feat(supply-chain): route proxy through custom artifactory with auth (PPSC-994)\n\nWire the configurable registry into the core supplychain package: config\nschema, URL security boundary, .npmrc auth resolution, and the proxy\nupstream/auth/CA-bundle plumbing.\n\n- config: registries\n[…]\n making\n  its own HTTP request. Added BaseUpstreamTransport, a package-level\n  test seam mirroring the existing execPMFunc pattern, so the test\n  injects a custom dialer without touching global state.",
          "is_bot": false,
          "headline": "[PPSC-994] feat(supply-chain): custom artifactory support with auth +…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-06T07:08:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da713af9ad3c811efc063166be3aa091086a1778",
          "body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.53.0 to 0.55.0.\n- [Commits](https://github.com/golang/net/compare/v0.53.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-version: 0.55.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#259)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-05T09:44:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5454bf9ff2ae85dcc4a1403ae38a87e83c20810",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 6 to 7 (#235)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-05T09:43:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8fc6d298def5192e621c50d7b018f8318b36c741",
          "body": "…mands (#260)\n\n* fix(supply-chain): use accurate verb wording for uninstall-family commands\n\nnpm/pnpm/bun re-resolve the dependency tree during uninstall/remove/rm,\nwhich can still trigger registry filtering. The summary previously\nclaimed a package was \"installed\", which reads as a non sequitur to\n\n[…]\nd, so a\n  value-taking flag like --prefix/--cwd could misread its value (e.g. a\n  path) as the subcommand and miss a removal verb that follows. It now\n  skips known value-taking flags and their value.",
          "is_bot": false,
          "headline": "[PPSC-1108] fix(supply-chain): accurate wording for npm uninstall com…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-07-05T09:03:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6809f428fc8c1f0a4f58b772596cf28a9804efa",
          "body": null,
          "is_bot": false,
          "headline": "PPSC-1087: Add `auth setup` to register a tenant's IdP config (#258)",
          "author_name": "dmitrysmirnov-armis",
          "author_login": "dmitrysmirnov-armis",
          "committed_at": "2026-07-03T15:23:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fefdff5a94e935dcd5f4cfe6b933f3e145351fe",
          "body": "* PPSC-1037 implement SSO through oauth2 device flow\n\n* feat: ARMIS_DEFAULT_LOGIN_METHOD env var to automatically trigger auth login sequence",
          "is_bot": false,
          "headline": "PPSC-1037: Add auth login/logout/whoami with OAuth2 device flow (#257)",
          "author_name": "dmitrysmirnov-armis",
          "author_login": "dmitrysmirnov-armis",
          "committed_at": "2026-07-02T15:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5df867b046428e5b8ac06df7cc1b095b167011a",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.17.0 (#256)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-30T13:21:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc7d64ba036cddbe48621137129167a4d740941d",
          "body": "* [PPSC-1065] feat(supply-chain): add PowerShell support to init\n\nExtend `supply-chain init` RC mode to PowerShell so Windows/PowerShell\nusers get install-time package-age enforcement, not just scanning.\n\n- DetectShells: append a PowerShell pass (pwsh on macOS/Linux; pwsh +\n  Windows PowerShell 5.1 \n[…]\nloadCommand now wraps the profile path with shellQuotePowerShell\nso paths containing spaces (e.g. OneDrive Documents redirects) work\ncorrectly. Update the test want strings to match the quoted output.",
          "is_bot": false,
          "headline": "[PPSC-1065] feat(supply-chain): add PowerShell support to init (#255)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-30T13:11:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ea88c480bcdb9635dc491ee220ae15c72d1888d",
          "body": "* feat(PPSC-895): migrate ingest path to /presigned-url + S3 + /scan\n\nReplaces the legacy /api/v1/ingest/tar streaming upload with the\noptimized split-flow ingest endpoints introduced server-side in PPSC-894:\n\n  1. POST /api/v1/ingest/presigned-url — reserves a scan_id and returns a\n     pre-signed \n[…]\n\n  drop the redundant []byte->string copy.\n\nAlso adds regression tests for the crossed-extension rejection, TiB\nclamping, the loopback gate on the SSRF shortcut, and the expanded\nIPv6 loopback bypass.",
          "is_bot": false,
          "headline": "feat(PPSC-895): migrate ingest to /presigned-url + S3 + /scan (#225)",
          "author_name": "Rushabh Thakkar",
          "author_login": "rushabh-thakkar-17",
          "committed_at": "2026-06-30T12:37:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a5657fef80860b1c63372fb10dd32f72800a9006",
          "body": "…andling (#254)\n\n* [PPSC-1010] fix(supply-chain): polish check gate, uninit, and npmrc handling\n\nRound out the supply-chain UX so its commands behave the way users expect:\n\n- check: register a local --fail-on defaulting to \"medium\" that shadows the\n  root's [CRITICAL] default. Violations grade MEDIU\n[…]\n avoid FD leak\n\nThe drain goroutine was leaving the read-end (r) open after io.Copy returned;\nadd r.Close() in the goroutine so the FD is released promptly. Addresses\nCopilot follow-up review threads.",
          "is_bot": false,
          "headline": "[PPSC-1010] fix(supply-chain): polish check gate, uninit, and npmrc h…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-30T09:02:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b1adfe6b33e29182366f6031653e3d24cf02cd2",
          "body": "… directives (#248)\n\nREADME only covered scan flags; .armisignore path exclusion lived in\nFEATURES.md and the suppression directives (rule/category/severity/cwe)\nwere undocumented outside the source and changelog. Add a top-level\nsection so users can discover both capabilities from the README.",
          "is_bot": false,
          "headline": "[PPSC-1067] docs: document .armisignore path patterns and suppression…",
          "author_name": "solbenzeev-ship-it",
          "author_login": "solbenzeev-ship-it",
          "committed_at": "2026-06-30T08:34:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54e33322b6dd46831fc6e832725b8a2a0f6b2efb",
          "body": "… policy (#246)\n\n* feat(supply-chain): proxy constraint check, manifest parsing, transitive-warn policy\n\nEngine internals for the subdependency-compatibility work. The age proxy\nis graph-blind: when it withholds a brand-new release and repoints `latest`\nto an older version, that older version may no\n[…]\nriteComplianceReport doc: \"-\" stderr output is best-effort, not a\n  clean machine-readable channel (human summaries also write to stderr).\n- Add regression test for per-pkg requiredRanges idempotency.",
          "is_bot": false,
          "headline": "[PPSC-1024] feat(supply-chain): transitive compatibility check + warn…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-29T12:44:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aff72432567889d5ceb6eb09b19324341788457f",
          "body": "* [PPSC-1081] feat(agent-detection): CLI ergonomics fixes\n\nFound during a /devex-review session of the agent-detection command:\n\n- Add cobra.NoArgs to agent-detection and collect so unknown positional\n  args error instead of silently running detection and exiting 0.\n- Generate the --help agent list \n[…]\nocs(agent-detection): use full name 'Google Antigravity' in doc comment\n\nAddress PR review: the AgentDetector doc comment listed 'Antigravity'\nwhile the display name elsewhere is 'Google Antigravity'.",
          "is_bot": false,
          "headline": "[PPSC-1081] feat(agent-detection): CLI ergonomics fixes (#253)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-29T12:35:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "df9d3286ca935caa6c42bfc48079298f1897e1d3",
          "body": "…ids source build behind TLS-inspecting proxies (#252)\n\narmis-cli install failed behind a TLS-inspecting proxy (Zscaler) while\nsetting up the MCP server's Python venv, surfacing a misleading\n\"╰─> cryptography\" CERTIFICATE_VERIFY_FAILED error.\n\nRoot cause: the SSL failure is not pip<->PyPI traffic bu\n[…]\nover a newer source-only release. The Rust build never happens. This\npins nothing and still falls back to a source build only if no version has\na wheel, so machines that already worked are unaffected.",
          "is_bot": false,
          "headline": "[PPSC-1080] fix(install): use pip --prefer-binary so cryptography avo…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-29T10:38:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ea759498f05a1bd2b2568739258422452fa4738",
          "body": "* [PPSC-1008] fix(install): harden install/uninstall lifecycle\n\n- Preflight for Python 3.11+ before any plugin download; centralize the\n  not-found error with per-OS install hints (CheckPython).\n- Stop advertising the nonexistent --jetbrains-project flag; give accurate\n  manual .jb-mcp.json setup gu\n[…]\ner (Windows keeps\n  the host-based path).\n- Suppress the recurring CWE-426 false positive on findPython's exec.LookPath\n  (name is from the hardcoded pythonCandidates allowlist; path validated below).",
          "is_bot": false,
          "headline": "[PPSC-1008] fix(install): harden install/uninstall lifecycle (#251)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-29T10:20:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba967d7a849b95bb2deb9d78965bf0a0d1c88af8",
          "body": "…n flags (#250)\n\n* fix(hook): remove MCP-plugin gate on hook init; scope scan flags [PPSC-1009]\n\nP0: `hook init` hard-errored (\"Armis MCP server not installed\") whenever the\nMCP plugin was absent, even though the installer already falls back to a direct\n`armis-cli scan repo . --changed=staged --no-p\n[…]\nh,\nworktrees, or submodules. Resolve the path through install.PreCommitHookPath\n(the same git rev-parse --git-path hooks the installer uses) so the assertion\ntracks wherever hook init actually writes.",
          "is_bot": false,
          "headline": "[PPSC-1009] fix(hook): remove MCP-plugin gate on hook init; scope sca…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-29T09:12:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "914cd9e80f4967233bf228f6ddfe60affed4f580",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.16.0 (#249)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-25T14:09:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f69d4cd8e7a7f31930607692888da125c6155e6c",
          "body": "…orks behind Zscaler (#247)\n\n* [PPSC-1064] fix(auth): honor OS proxy (WinINET/PAC) so Windows auth works behind Zscaler\n\nThe CLI's http.Clients left Transport nil, so they used http.DefaultTransport,\nwhose ProxyFromEnvironment only reads HTTP_PROXY/HTTPS_PROXY env vars and ignores\nthe Windows WinINE\n[…]\n, but OS\n  proxy detection is Windows-only (ieproxy); CGO_ENABLED=0 macOS/Linux builds\n  fall back to env vars. Reword to state Windows is automatic and other\n  platforms honor HTTPS_PROXY/HTTP_PROXY.",
          "is_bot": false,
          "headline": "[PPSC-1064] fix(auth): honor OS proxy (WinINET/PAC) so Windows auth w…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-25T11:04:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a91ad60273d805ef80b2309f4d4b2ccf666a3b1",
          "body": "* [PPSC-1012] feat(completion): make shell completion discoverable and useful\n\nTwo gaps from the DX audit (S8, lowest feature score 4.0/10):\n\n#26 - Completion was undiscoverable: README had zero mentions. Add a\n\"Shell Completion\" subsection under Installation with verbatim bash/zsh/\nfish/powershell \n[…]\n/\"auto\" as the default in the completion\nhint is misleading when the env var is set (per Copilot review). Drop the\n\"(default)\" suffix on those two; --color and --group-by keep it (hardcoded\ndefaults).",
          "is_bot": false,
          "headline": "[PPSC-1012] feat(completion): tab-complete enumerated flag values (#245)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-24T10:16:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "82998bbd86a8b8b2221ac4ca06aeb8e7e1058995",
          "body": "…244)\n\n* [PPSC-1014] fix(devex): green make test, lint cache docs, Go badge\n\nContributor first-5-minutes: a clean checkout looked broken because\n`make test` reported 8 false failures (gotestsum misparsing, not real\ntest failures).\n\n#10 (P1): suppress the upload spinner in TestScanRepoCmd and redirec\n[…]\nase to .PHONY\n\nAddress Copilot review: the release target was the only one missing\nfrom .PHONY, so a stray file named 'release' would silently make it a\nno-op. Touched this line anyway for lint-clean.",
          "is_bot": false,
          "headline": "[PPSC-1014] fix(devex): green make test, lint cache docs, Go badge (#…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-24T07:58:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e36fc689b6df45f20721569198d104ec8810b91",
          "body": "Make upgrades self-explanatory across three touchpoints:\n\n- Update notification now links the release notes for the available\n  version so breaking changes can be reviewed before upgrading.\n- Legacy Basic auth --token / -t is marked deprecated (Cobra prints a\n  stderr warning and hides it from --hel\n[…]\nuth behavior is unchanged.\n- CHANGELOG: add \"Action required\" callouts to supply-chain entries\n  that need a user step, and backfill the missing 1.5.0/1.6.0/1.6.1\n  release sections and compare links.",
          "is_bot": false,
          "headline": "[PPSC-1013] feat(ux): signpost the upgrade path (#243)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-23T14:46:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54d59f24ea5448ce8e0bcdb6159ef7ac10a0c8be",
          "body": "…ore, and missing commands (#242)\n\n* [PPSC-1011] docs: update README and docs for --changed flag, binary name, and armisignore\n\n- Document --changed flag (all three modes) in README with CI-INTEGRATION cross-link\n- Add \"Other Commands\" section covering agent-detection, hook init, completion\n- Tip in\n[…]\nyaml snippet with .armisignore explanation in CI-SETUP\n- Drop --tenant-id from SBOM/VEX examples in FEATURES (JWT auto-extracts it)\n\n* docs: fix PowerShell capitalization in completion example comment",
          "is_bot": false,
          "headline": "[PPSC-1011] docs: update README and docs for --changed flag, armisign…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-23T14:46:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f4beda93711b12c5a805a07b8f5856dcd1e9781",
          "body": "* [PPSC-1006] fix(scan): validate flags before auth and network\n\nSurface flag errors (--fail-on, --pull) and SBOM/VEX misuse warnings\nbefore authentication and any network calls, so a typo fails fast as a\nflag error instead of hiding behind an auth failure or silently\ndefaulting once auth succeeds.\n\n[…]\nrrelevant. Gate the validation on the\nimage-name path (tarballPath == \"\") so a bad --pull is ignored with\n--tarball, surfacing the tarball error instead.\n\nAddresses Copilot review feedback on PR #240.",
          "is_bot": false,
          "headline": "[PPSC-1006] fix(scan): validate flags before auth and network (#240)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-23T13:52:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c92408d0e9e73df9ec4fddf1035c90f1d786cb11",
          "body": "…238)\n\n* [PPSC-1007] fix(ux): improve error message quality — problem + cause + fix\n\n- Auth error now lists --client-id/--client-secret flags alongside env vars\n- Unknown-flag errors append 'Run <cmd> --help' hint (SetFlagErrorFunc on rootCmd)\n- scan image checks for missing container runtime before\n[…]\now covers \"installed but daemon not running\" case\n- IsDockerAvailable uses dockerBinary/podmanBinary constants (no drift)\n- anyMCPMissing iterates result.Users directly (avoids FlatResults allocation)",
          "is_bot": false,
          "headline": "[PPSC-1007] fix(ux): error message quality — problem + cause + fix (#…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-23T13:47:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b6b0f076a72cd62e9bb2f65f047af0dd1e5dac2",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.15.0 (#239)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-22T22:42:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbb0ec7020c19fdce4173ea8e8618a5383e4163f",
          "body": "…abels (#233)\n\nThe --include-non-exploitable filter matched zero findings: the backend\nexploitability label schema drifted from a boolean ({Exploitable: false})\nto a graded one ({Exploitability Level: armis_appsec:exploitability:<level>}),\nso the old filter was a no-op. Unit tests passed only becaus\n[…]\n.go and image.go.\n- Update --include-non-exploitable help text and the filtered-count summary\n  line to match the graded model.\n- Update CHANGELOG and rewrite tests against real backend label strings.",
          "is_bot": false,
          "headline": "[PPSC-1015] fix(scan): repair dead exploitability filter for graded l…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-22T22:31:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "316fd28c4751f92f34ed41fcf251db49569b681e",
          "body": "* feat(auth): auto-detect region from credentials for data-plane routing\n\nSplit URL resolution into two phases tied to the auth lifecycle. The new\nresolveDataPlaneURL() reads the region the auth service discovers (JWT\nregion claim, with response-body fallback) and routes region-pinned\ndata-plane cal\n[…]\nhe cold and force region re-discovery on every refresh. Persist the\nresolved region (claim, with response-body fallback) so the next exchange's\nregion hint stays warm whichever signal the server uses.",
          "is_bot": false,
          "headline": "[PPSC-1018] feat(auth): auto-detect region from credentials (#237)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-22T15:29:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b549eac626b7ab53ad0c6e2bddb75367a988c520",
          "body": "…#236)\n\n* [PPSC-1005] docs(onboarding): lead with credential-free Quick Start\n\nReorganize the README so an install-to-scan reader reaches a working\ncommand faster:\n\n- Add a \"Try it without credentials\" Quick Start that runs\n  `supply-chain check` against public registries with no Armis account.\n- Mo\n[…]\nckfile, and document the no-lockfile fallback (path / --lockfile).\n- Make the auth 401 error single-line; let the UI layer format it.\n- Replace the (#PR) CHANGELOG placeholder with the real PR number.",
          "is_bot": false,
          "headline": "[PPSC-1005] docs(onboarding): lead with credential-free Quick Start (…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-22T15:10:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3f669f48bfc3a0cb5436ca6ed6cd26a39d9836a",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.14.0 (#232)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-21T10:49:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a0f160466c9ba7a58f49733bef8c34f15437855",
          "body": "…ne (#228)\n\n* fix(auth): route region-pinned uploads to the correct data plane\n\nThe data plane (/api/v1/ingest/*) is physically region-pinned, but only\nthe token exchange was region-aware. A region-scoped JWT was presented to\nthe primary host on upload and rejected with a 401 (the eu1 bug).\n\nAdd aut\n[…]\nation), leaving only the ARMIS_API_URL override line as a\nsink, which keeps its own scoped suppression. Align the reason wording with\nauth.NewAuthClient.\n\nAddresses Copilot review feedback on PR #228.",
          "is_bot": false,
          "headline": "[PPSC-984] fix(auth): route region-pinned uploads to correct data pla…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-21T10:39:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e8769e002c3f8996487b666c8227d4c63823a82",
          "body": "…dict (#231)\n\n* fix(supply-chain): detect status ecosystems via upward walk (PPSC-997)\n\nsupply-chain status only probed the current directory for lockfiles, so\nfrom a project subdirectory it reported \"(none detected)\" even when a\nlockfile at the project/monorepo root would be enforced by the wrapper\n[…]\np3.12)\n- uniqueWrappedPMs: drop the redundant HasInjection read (WrappedPMs is its own\n  presence check), halving RC-file IO\n- clarify collapsePipVariants doc on the intentional trailing pip placement",
          "is_bot": false,
          "headline": "[PPSC-997] feat(supply-chain): lead status with a live protection ver…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-18T10:06:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1338391d83df4c3208ef8c1e769b48e70a441d72",
          "body": "…ns (#221)\n\n* Filtered PR findings based on diff\n\n* fix(PPSC-781): address Copilot review comments on diff filtering\n\n- Skip '\\' sentinel lines (e.g. 'No newline at end of file') in\n  parseDiffLineNumbers to prevent spurious line number misalignment\n- Explicitly match only '+' and ' ' prefixes inste\n[…]\n unfiltered to avoid silent\n  under-reporting\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix: Align PR comment alert count with inline Code Scanning annotatio…",
          "author_name": "khyati-crest",
          "author_login": "khyati-crest",
          "committed_at": "2026-06-18T08:59:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "737f09cc59ee1ab38ef17d87aa93a6454b7c8a4b",
          "body": "…on (#222)\n\n* fix(supply-chain): correct PyPI prerelease misclassification and flip filter summary (PPSC-958)\n\nPyPI BlockedPackage.Version holds a filename (filelock-3.29.2.tar.gz), but\nisPrerelease() split on the first '-' and read every PyPI package as a\nprerelease. That tripped the onlyPrerelease\n[…]\n SemVer prereleases\n(\"2.0.0-alpha.1\", \"v1.2.3-beta\") still classify correctly.\n\nAdds TestIsPrerelease cases for pkg2-/4ti2- filenames and v-prefixed SemVer.\n\nAddresses Copilot review comments on #222.",
          "is_bot": false,
          "headline": "[PPSC-958] fix(supply-chain): correct PyPI prerelease misclassificati…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-18T08:45:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72519d7ef40880c0820c8218a3f7e5eba159a566",
          "body": "…(#229)\n\n* [PPSC-995] feat(supply-chain): add -o/--output flag to check command\n\nsupply-chain is a sibling of scan in the command tree, so it did not\ninherit scan's persistent --output flag. Register -o/--output locally on\n`supply-chain check` to reuse the existing ResolveOutput pipeline (file\nwriti\n[…]\nession this PR fixes). Drive the value through the bound\nflag via Flags().Set, and add TestSupplyChainCheckOutputFlagRegistered to\nassert the real scCheckCmd registers -o/--output bound to outputFile.",
          "is_bot": false,
          "headline": "[PPSC-995] feat(supply-chain): add -o/--output flag to check command …",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-18T08:28:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "581051ffad98216d49554cdf85c2870684a5b2af",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.13.0 (#227)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-16T09:58:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1d99ff159299fda5e88e871efe5bd103f404a43",
          "body": "…upting lockfiles (#226)\n\n* fix(supply-chain): stop uv.lock corruption from proxied uv commands\n\nuv records the configured index URL as each package's source.registry\nin uv.lock, and an index differing from the recorded one marks the lock\noutdated and triggers a full re-lock. Routing lockfile-writin\n[…]\n to it for manual\n  recovery.\n\nAdd TestProxyUpstreamPreservesBasePath covering default, base-path,\ntrailing-slash, and nested-path upstreams.\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "[PPSC-978] fix(supply-chain): stop proxied package managers from corr…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-16T09:16:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "44ea587a6ee8fac3c830a5c30223e7687e847167",
          "body": "* feat(supply-chain): wrap uvx for age enforcement (PPSC-934)\n\nuvx (uv's on-demand tool runner; `uvx X` ≡ `uv tool run X`) fetches a\ntool from PyPI and runs it — exactly the supply-chain vector the proxy\nguards — but was not wrapped, so it bypassed age enforcement even where\nuv itself was wrapped. W\n[…]\nfrom the primary detection set\n(allSupportedPMs) and paired with their base PM, still PATH-gated —\ndistinguishing \"not in the main scan\" from \"not detected at all\".\n\nAddresses PR #219 review feedback.",
          "is_bot": false,
          "headline": "feat(supply-chain): wrap uvx for age enforcement (PPSC-934) (#219)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-10T12:39:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8e93ffc3478ce6117090c89efb9cd832eed35e8c",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.12.0 (#220)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-10T09:37:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b60d5a55ebbf8bbf966b63b909162a49701a3076",
          "body": "…ed tags (#213)\n\n* [PPSC-731] feat(action): publish dedicated GitHub Action with versioned tags\n\nThe dedicated composite action (root action.yml, ArmisSecurity/armis-cli)\nalready existed but lacked versioned distribution: consumers were told to\npin @main, and no floating major/minor tags existed.\n\n-\n[…]\ne, so the GitHub Action / floating-tag feature has not been released\nyet. Move all five #213 entries back under [Unreleased] and prune the\nnow-empty Deprecated/Removed headers from the 1.11.0 section.",
          "is_bot": false,
          "headline": "[PPSC-731] feat(action): publish dedicated GitHub Action with version…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-10T09:20:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "462c529af61497059cf0f527a0b702e78f038fed",
          "body": "…t exclusions (#218)\n\n* chore: upgrade golangci-lint CI version from v2.10.1 to v2.12.2\n\n- Bump golangci-lint-action version in reusable-lint.yml\n- Add goconst.ignore-tests: true to suppress test fixture string noise\n- Add named constants throughout production code to satisfy stricter\n  goconst thre\n[…]\ntead of borrowing groupByNone's\n  grouping semantics.\n- editors.go: add armis:ignore cwe:502 at the json.Unmarshal sink (Go\n  encoding/json into map has no gadget deserialization; local config input).",
          "is_bot": false,
          "headline": "[PPSC-931] chore(ci): upgrade golangci-lint to v2.12.2 and fix gocons…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-09T13:51:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11eb900ca4c09c98ee03a8eeea4cce6bb4a00a25",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.11.1 (#217)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-08T16:11:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97a36ace650923749c3550be716e88645f0a903f",
          "body": "…pers (#216)\n\n* [PPSC-927] fix(supply-chain): make init shell wrappers survive armis-cli upgrades\n\nresolveCliPath embedded the fully symlink-resolved binary path, which on\nHomebrew is the version-pinned Cellar dir (e.g. .../Cellar/armis-cli/1.11.0/...).\nAfter `brew upgrade armis-cli` deleted that di\n[…]\n` prefix so the guard can be extended without breaking them, and\na new test locks in the executable-path check for the absolute-path case.\n\nAddresses copilot-pull-request-reviewer feedback on PR #216.",
          "is_bot": false,
          "headline": "[PPSC-927] fix(supply-chain): survive armis-cli upgrades in init wrap…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-08T16:01:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ff12e42d44c764e6cf45ef7f9fd0ce42e5223361",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.11.0 (#215)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-08T12:21:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d16df2fa9fc73bffa2ecc32a6a27cecdb150c60a",
          "body": "…-based to PATH-based (#214)\n\n* [PPSC-920] feat(supply-chain): switch init PM detection from lockfile-based to PATH-based\n\nShell functions injected by `supply-chain init` are global (they shadow\nthe PM command in every directory), so the wrapper set should reflect\nwhat is installed on the machine, n\n[…]\n(lint): lift loop condition in scanPathExecutables (QF1006)\n\nReplace `for { if condition { break } ... }` with the idiomatic\n`for len(seen) < maxScanPathResults { ... }` to satisfy staticcheck QF1006.",
          "is_bot": false,
          "headline": "[PPSC-920] feat(supply-chain): switch init PM detection from lockfile…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-08T12:04:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb5927f0ecd21b8a31ef4f614f5ef68c4c733670",
          "body": "… docs (#212)\n\n* [PPSC-879] feat(supply-chain): DX polish — wrap summary, error UX, CI docs\n\n* fix(supply-chain): populate Allowed() for PyPI proxy; route wrapEcosystemEnforced through loadConfigUpward\n\n- filterPyPISimple now populates p.allowed with the newest safe version\n  extracted from kept fil\n[…]\nnow returns the\n  detected ecosystems so the caller can tell \"no lockfiles\" (npm\n  fallback) apart from \"all scoped out\", reporting the latter plainly and\n  exiting 0 instead of wrapping out-of-scope.",
          "is_bot": false,
          "headline": "[PPSC-879] feat(supply-chain): DX polish — wrap summary, error UX, CI…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-07T06:55:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3ec25c9aaf69134d429dd78df5e40ddeb7e53f6",
          "body": "…e-age enforcement (#211)\n\n* [PPSC-878] feat(supply-chain): add Java (Maven/Gradle) package release-age enforcement\n\n* [PPSC-878] fix(supply-chain): address PR #211 review comments\n\n- maven registry: escape Solr query special chars (`\"`, `\\`) in\n  group/artifact/version before interpolating into the\n[…]\nfallback version\n  source to backfill versionless <dependencies> entries.\n- gradle check: fix misleading comments — the suffix after `=` is a\n  comma-separated list of configuration names, not a hash.",
          "is_bot": false,
          "headline": "[PPSC-878] feat(supply-chain): add Java (Maven/Gradle) package releas…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-04T07:52:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "64b190490d05770b64c1ea0d5ab4edfdf5cbb112",
          "body": "* [PPSC-877] fix(supply-chain): address PR #209 review comments\n\nResolve four correctness edge cases raised by Copilot on PR #209\n(merged before they were addressed), all in the Python release-age\nenforcement path:\n\n- pip.go: raise the bufio.Scanner token buffer to maxLockfileSize so\n  requirements.\n[…]\nr name-match behavior while Unix retains the improvement,\nand skip the Unix-only \"ignores non-executable\" subtest on Windows.\nIntroduce a shared goosWindows constant for the package's platform guards.",
          "is_bot": false,
          "headline": "[PPSC-877] fix(supply-chain): address PR #209 review comments (#210)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-03T19:08:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "176d477d95e6923bb1cc7a6f9502488e5582842e",
          "body": "…ment\n\nExtend supply-chain age enforcement to the Python ecosystem alongside the\nexisting Node.js support. Two enforcement paths:\n\n- Proxy path (pip, uv): transparent registry override via PIP_INDEX_URL /\n  UV_INDEX_URL filters out package versions younger than the policy minimum.\n- Pre-install audi\n[…]\nt, lockfile parsers (requirements.txt, uv.lock,\npoetry.lock, Pipfile.lock, pdm.lock), pip-variant detection (pip3, pip3.12),\nand config/detection wiring, with table-driven tests and testdata fixtures.",
          "is_bot": false,
          "headline": "[PPSC-877] feat(supply-chain): add Python package release-age enforce…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-03T16:33:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "99729c427f410b61de5667d49c7f2674b2f94b61",
          "body": "…ement (#206)\n\n* feat(supply-chain): add Node.js supply chain protection core\n\nImplement supply chain attack protection for Node.js package managers\n(npm, yarn, pnpm, bun) with lockfile integrity verification and\nrelease age policy enforcement via a local registry proxy.\n\n- Add `supply-chain init/un\n[…]\n (>= because MaxInt64 is not exactly representable and rounds up to 2^63).\nAdd regression tests for overflowing values and the largest in-range boundary.\n\nAddresses Copilot review feedback on PR #206.",
          "is_bot": false,
          "headline": "[PPSC-876] feat(supply-chain): add Node.js package release-age enforc…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-06-03T10:00:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "207e5a77157ae17cb61039dabd8e2882784fdfee",
          "body": "Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.44.0 to 0.45.0.\n- [Commits](https://github.com/golang/sys/compare/v0.44.0...v0.45.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sys\n  dependency-version: 0.45.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 (#195)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-29T10:05:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1223a27f5ee8c7438a114dcd064859a7d9d6e405",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.10.2 (#205)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-28T10:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7ea606d1c742ca6073c6a0a6b0b9f2015025d42",
          "body": "… (#204)\n\nGemini CLI expects timeout in milliseconds. The hook was configured with\n10 (10ms), causing it to time out before the Python script could start.\nChanged to 10000 (10 seconds).",
          "is_bot": false,
          "headline": "[PPSC-853] fix(install): use correct timeout unit for Gemini CLI hook…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-28T10:06:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5aca89bd566e9be616314da5b2675f1e90d7397",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.10.1 (#203)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-28T06:30:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d49058087d0d2d12ae4922815079544aa4e68578",
          "body": "* fix(install): write Copilot CLI hook to ~/.copilot/settings.json\n\nThe install wizard was writing the hook config to\n~/.config/github-copilot/hooks.json (the VS Code extension path),\nbut Copilot CLI reads hooks from ~/.copilot/settings.json.\n\n- Fix copilotHooksPath() to target ~/.copilot/settings.j\n[…]\n flagged line for CWE-22 suppression\n\nThe scanner flags the specific line calling removeLegacyFileIfArmisOnly,\nnot the enclosing if-block. Move the suppression comment directly above\nthe flagged call.",
          "is_bot": false,
          "headline": "[PPSC-836] fix(install): write Copilot CLI hook to correct path (#202)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-27T19:26:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1872d8850be3b5d86ec7e7c9844bcad7e7e73846",
          "body": "* fix(install): register MCP server in Codex CLI config.toml\n\nThe install wizard previously only wrote pre-tool-use hooks to\n~/.codex/hooks.json but never registered an MCP server entry in\n~/.codex/config.toml, so Codex could not call the scanner tools.\n\nAdd a text-based TOML section appender that w\n[…]\ntrings.Split)\n- Install Codex native hooks in installAll (no-args) path to match\n  the documented behavior (\"registers MCP server + hooks\")\n- Add test for section-at-EOF-with-trailing-newline scenario",
          "is_bot": false,
          "headline": "[PPSC-846] fix(install): separate Copilot CLI from VS Code target (#201)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-27T13:54:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f19c96d9ee191531a4176382ede24e12921a23bc",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.10.0 (#200)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-27T08:43:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92a8780f21e578330a3e7d1903b0ea3e0e370d80",
          "body": "…ks (#199)\n\n* feat(install): add interactive MCP install wizard with hooks and validation\n\nAdd interactive installation flow, theme selection, hook management\n(native Git hooks and pre-commit framework), and plugin validation.\n\n* fix(install): harden hook configs against path injection and data loss\n[…]\nut to show\n  the actual resolved path (supports worktrees/submodules)\n- Skip native Copilot CLI hook removal when uninstalling \"copilot\" target,\n  which is an alias for VS Code MCP deregistration only",
          "is_bot": false,
          "headline": "[PPSC-836] feat(install): add interactive MCP install wizard with hoo…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-27T07:59:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6e6f7a9119472511b704b73d3431f67303fe1f18",
          "body": "… CI findings (#198)\n\n* fix(scan): add inline suppression directives for remaining CI findings\n\nAdd and update armis:ignore comments to suppress false-positive\nfindings from the inline matching engine. Adds cwe:22, cwe:78,\ncwe:94, cwe:522, and cwe:20 directives where inputs are already\nvalidated or \n[…]\nard from the finding line. Remove\ndirectives placed after the flagged lines in httpclient/client.go\nand scan/image/image.go as they have no effect — the above-line\ndirectives already provide coverage.",
          "is_bot": false,
          "headline": "[PPSC-840] fix(scan): add inline suppression directives for remaining…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-26T13:14:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9bbd9fa3fdb3881b9b986900b2f9448350bc71f8",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.9.4 (#197)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-25T15:38:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bdac18d4d30c2047ff41672e9f38050597ec3e9e",
          "body": "…s (#194)\n\n* fix(scan): add inline suppression directives for remaining CI findings\n\nThe v1.9.3 CI scan still reported 4 findings despite the directive\nupdates in #192. Root cause: standalone above-line directives are\nunreachable when intervening code lines block the upward scan.\n\n- sarif.go: add ar\n[…]\nf.go: restore regex transformation explanations alongside armis:ignore\n- image.go: consolidate redundant cwe:22 directives; fix rationale to\n  reference SanitizePath in this function (not \"in caller\")",
          "is_bot": false,
          "headline": "fix(scan): add inline suppression directives for remaining CI finding…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-25T15:26:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c76f5ef4ded1365b33c973bdba3e84627b6b5f77",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.9.3 (#193)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-25T12:29:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56c3d4ada3bc7872f6592f2cdde4dd441160e436",
          "body": "…tching engine (#192)\n\n* [PPSC-832] fix(scan): update suppression directives for new inline matching engine\n\nAdjusts armis:ignore directives to work with the v1.9.2 suppression\nengine that validates CWE applicability before accepting. Moves\nabove-line directives inline, adds missing CWE IDs, and add\n[…]\nelying on\n  deduplication as a bound (removes suppression directive)\n- image.go: Add defense-in-depth validation inside imageExistsLocally\n  so the suppression rationale is self-contained and accurate",
          "is_bot": false,
          "headline": "[PPSC-832] fix(scan): update suppression directives for new inline ma…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-25T11:14:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "234884038010b31cc9c3e5f11d7e4928ba4dcd64",
          "body": "…n, and inline suppression (#191)\n\n* test: improve coverage for install, uninstall, scan, and inline suppression\n\nAdd targeted unit tests to recover coverage dropped by recent install/uninstall\ncommands. Overall coverage moves from 73.5% to 76%.\n\nNew test files:\n- internal/scan/title_test.go (Genera\n[…]\nest.go (isFuncSignature, containsAny)\n- internal/install/uninstall_test.go (ManifestPath, DeregisterAllEditors, writeJSONAtomic)\n\n* fix(test): close pipe reader FDs in confirm() tests to prevent leaks",
          "is_bot": false,
          "headline": "[PPSC-830] test(coverage): add unit tests for install, uninstall, sca…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-25T10:20:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3b5f01adac78a66cbe066aea7a043f796bd635a",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.9.2 (#190)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-25T09:39:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9ef404d25acf820249967f9bcadf15872a9edb5",
          "body": "… before accepting (#189)\n\nPreviously the suppression engine accepted the first nearby armis:ignore\ndirective regardless of whether its CWE/category/rule matched the finding.\nThis caused false suppressions with stacked comments and missed suppressions\nwhen the nearest comment targeted a different CW\n[…]\nInlineDirective.CWE string → CWEs []string\n- Add comprehensive tests for stacked comments, fall-through, multi-CWE\n- Fix inline suppression comments across codebase for SARIF accuracy\n\nCloses PPSC-828",
          "is_bot": false,
          "headline": "fix(scan): inline suppression now matches directives by applicability…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-25T09:08:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ecb363129f04c90160b362ddb88491e819c9d805",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.9.1 (#188)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-24T09:01:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cef9a18720482ba3e80a74cdcb9d8e880a16ad76",
          "body": "Bumps [golang.org/x/term](https://github.com/golang/term) from 0.42.0 to 0.43.0.\n- [Commits](https://github.com/golang/term/compare/v0.42.0...v0.43.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/term\n  dependency-version: 0.43.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/term from 0.42.0 to 0.43.0 (#168)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-24T08:40:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9dfee6a4a744eff75f1fe149315a2d5fd3a3328",
          "body": "… (#139)\n\nBumps [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) from 0.0.21 to 0.0.23.\n- [Commits](https://github.com/mattn/go-runewidth/compare/v0.0.21...v0.0.23)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-runewidth\n  dependency-version: 0.0.23\n  depend\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/mattn/go-runewidth from 0.0.21 to 0.0.23…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-24T08:38:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2fef156cffbb8eec0ae9d3d239c6987aa38670bc",
          "body": "Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.1 to 4.1.2.\n- [Release notes](https://github.com/sigstore/cosign-installer/releases)\n- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.1.1...v4.1.2)\n\n---\nupdated-dependencies:\n- dependency-name\n[…]\ndependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yiftach Cohen <91976623+yiftach-armis@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#165)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-24T08:37:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bdca468137d09989f2d1ba00b8e2f869ca1712e3",
          "body": "….1 (#156)\n\nBumps [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma) from 2.23.1 to 2.24.1.\n- [Release notes](https://github.com/alecthomas/chroma/releases)\n- [Commits](https://github.com/alecthomas/chroma/compare/v2.23.1...v2.24.1)\n\n---\nupdated-dependencies:\n- dependency-name: \n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/alecthomas/chroma/v2 from 2.23.1 to 2.24…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-24T08:37:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93fe695feb81f9277458c23d8ef4a044e4e51e8f",
          "body": "Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.43.0 to 0.44.0.\n- [Commits](https://github.com/golang/sys/compare/v0.43.0...v0.44.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sys\n  dependency-version: 0.44.0\n  dependency-type: direct:production\n  update-type: version-\n[…]\ndependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yiftach Cohen <91976623+yiftach-armis@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 (#167)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-24T08:35:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ffe86b18b06b86dd55e3c03ae4accda0e3f8e756",
          "body": "…#183)\n\nBumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.18.0 to 5.19.1.\n- [Release notes](https://github.com/go-git/go-git/releases)\n- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)\n- [Commits](https://github.com/go-git/go-git/compare/v5.18.0...v5.19.\n[…]\nndency-version: 5.19.1\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.1 (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-24T08:31:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "838ee8d63b56314ecb71269adfc1ab5b72e28b60",
          "body": "…gnatures (#187)\n\n* [PPSC-810] fix(scan): make inline suppression see through function signatures\n\nThe upward scan in ApplyInlineSuppression now treats function/method\nsignature lines (func, def, class, etc.) as transparent, matching how\nGo/Python/JS developers place pragma comments above declaratio\n[…]\nace unbounded ReadString with\n  bufio.Scanner + io.LimitReader(256) to bound stdin reads\n- Fix CWE-476 in junit.go: add defensive nil check on result instead of\n  suppressing with armis:ignore comment",
          "is_bot": false,
          "headline": "[PPSC-810] fix(scan): make inline suppression see through function si…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-24T08:30:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7fafeaa2bdcaf9d433b5ca2150d374d210e705bf",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.9.0 (#186)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-21T09:33:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fedd887125bd8417884ccaa0846885ebc3ee0b66",
          "body": "…close GitHub alerts (#185)\n\n* [PPSC-810] fix(scan): exclude suppressed findings from SARIF to auto-close GitHub alerts\n\nGitHub Code Scanning does not honor SARIF `suppressions` arrays to\nauto-close pre-existing alerts. It only closes alerts when findings are\ncompletely absent from the upload. This \n[…]\n actual trust\n  boundary (user-local env var, not \"not user-controlled\")\n- Add assertion on Tool.Driver.Rules in mixed suppressed/active test to\n  verify buildRules() also excludes suppressed findings",
          "is_bot": false,
          "headline": "[PPSC-810] fix(scan): exclude suppressed findings from SARIF to auto-…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-21T09:05:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "767549d252da02063bdbfea68f266a8be0b5e537",
          "body": "…e detection (#182)\n\n* [PPSC-745] feat(install): add uninstall command, manifest, and upgrade detection\n\n- armis-cli uninstall [editors...] [--keep-credentials] [--force]\n  removes MCP server registration from editor configs and Claude Code\n  registry, with optional credential preservation for easy \n[…]\nsilently skipping\n- uninstallTargets: surface WriteManifest errors as user-facing warnings\n- Add tests for hasArmisEntry error paths\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "[PPSC-795] feat(install): add uninstall command, manifest, and upgrad…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-20T12:48:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "74d622d8bc8bdc7eaf916af59cd5a75ed3fe333f",
          "body": "…n (#184)\n\n* [PPSC-797] fix(install): probe versioned Python binaries in findPython\n\nHomebrew on macOS often installs Python as python3.11/python3.12 without\nan unversioned python3 symlink. Expand the candidate list so the install\ncommand finds these versioned binaries before falling back to python3\n[…]\ness PR review feedback: the candidate list was duplicated between\nfindPython() and the error message. Extract to a package-level var\nand derive the error string with strings.Join so they stay in sync.",
          "is_bot": false,
          "headline": "[PPSC-797] fix(install): probe versioned Python binaries in findPytho…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-20T10:28:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3dff1f309000f56d79a4417ef39bed11d205bd9",
          "body": null,
          "is_bot": false,
          "headline": "docs: update CHANGELOG for v1.8.4 (#181)",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-18T12:10:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acbe78687d64eaa333b7650f61c4e366b018101c",
          "body": "* Added symlink eval before path traversal\n\n* Added test case for symlink prefix check\n\n* Fixed linting",
          "is_bot": false,
          "headline": "Added symlink eval before path traversal (#176)",
          "author_name": "khyati-crest",
          "author_login": "khyati-crest",
          "committed_at": "2026-05-18T08:12:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cce15e5f54954a28f819c1703f5ed44e8de3970f",
          "body": "…180)\n\n* [PPSC-790] fix(cmd): prevent secrets from leaking in --help output\n\nMove environment variable resolution from flag defaults to PersistentPreRunE.\nPreviously, credentials set via ARMIS_CLIENT_ID, ARMIS_CLIENT_SECRET,\nARMIS_API_TOKEN, ARMIS_TENANT_ID, and ARMIS_REGION were used as flag\ndefaul\n[…]\nion on !cmd.Flags().Changed(\"flag-name\")\ninstead of checking for empty string. This allows users to intentionally\nclear an env-provided credential via --token=\"\" without the env var\nbeing repopulated.",
          "is_bot": false,
          "headline": "[PPSC-790] fix(cmd): prevent secrets from leaking in --help output (#…",
          "author_name": "Yiftach Cohen",
          "author_login": "yiftach-armis",
          "committed_at": "2026-05-18T06:41:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 47,
      "commits_last_year": 340,
      "latest_release_at": "2026-07-16T11:21:40Z",
      "latest_release_tag": "v1.20.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 34,
      "days_since_latest_release": 11,
      "mean_days_between_releases": 4.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/ArmisSecurity/armis-cli",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/ArmisSecurity/armis-cli",
          "is_deprecated": false,
          "latest_version": "v1.20.0",
          "repository_url": "https://github.com/ArmisSecurity/armis-cli",
          "versions_count": 48,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T11:16:11Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 11
        }
      ]
    },
    "popularity": {
      "forks": 4,
      "stars": 9,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-01-18",
            "count": 1
          },
          {
            "date": "2026-04-30",
            "count": 1
          },
          {
            "date": "2026-06-12",
            "count": 2
          }
        ],
        "complete": true,
        "collected": 4,
        "total_forks": 4
      },
      "star_history": null,
      "open_issues_and_prs": 11
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod",
        "internal/supplychain/check/testdata/pom.xml"
      ],
      "largest_source_bytes": 73357,
      "source_files_sampled": 269,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 10773
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 53,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/BurntSushi/toml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/Masterminds/semver/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.5.0"
        },
        {
          "name": "github.com/alecthomas/chroma/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.27.0"
        },
        {
          "name": "github.com/cenkalti/backoff/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.3.0"
        },
        {
          "name": "github.com/charmbracelet/huh",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/distribution/reference",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "github.com/go-git/go-git/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.19.1"
        },
        {
          "name": "github.com/mattn/go-ieproxy",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.12"
        },
        {
          "name": "github.com/mattn/go-runewidth",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.24"
        },
        {
          "name": "github.com/muesli/termenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.16.0"
        },
        {
          "name": "github.com/schollz/progressbar/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.19.1"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/xeipuuv/gojsonschema",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.47.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/alecthomas/chroma/v2",
            "direct": true,
            "version": "v2.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": true,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/huh",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/lipgloss",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": true,
            "version": "v5.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": true,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-ieproxy",
            "direct": true,
            "version": "v0.0.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": true,
            "version": "v0.0.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/termenv",
            "direct": true,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/schollz/progressbar/v3",
            "direct": true,
            "version": "v3.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonschema",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/atotto/clipboard",
            "direct": false,
            "version": "v0.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52/v2",
            "direct": false,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/catppuccin/go",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbles",
            "direct": false,
            "version": "v0.21.1-0.20250623103423-23b8fd6302d7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbletea",
            "direct": false,
            "version": "v1.3.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.2.3-0.20250311203215-f60798e515dc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/cellbuf",
            "direct": false,
            "version": "v0.0.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/exp/strings",
            "direct": false,
            "version": "v0.0.0-20240722160745-212f7b056ed0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/stringish",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dlclark/regexp2/v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikgeiser/coninput",
            "direct": false,
            "version": "v0.0.0-20211004153227-1c3628e74d0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg",
            "direct": false,
            "version": "v1.5.1-0.20230307220236-3a3c6141e376",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-context",
            "direct": false,
            "version": "v0.0.0-20150711004518-d14ea06fba99",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-localereader",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/colorstring",
            "direct": false,
            "version": "v0.0.0-20190213212951-d06e56a500db",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/hashstructure/v2",
            "direct": false,
            "version": "v2.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/ansi",
            "direct": false,
            "version": "v0.0.0-20230316100256-276c6243b2f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonpointer",
            "direct": false,
            "version": "v0.0.0-20180127040702-4e3ac2762d5f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonreference",
            "direct": false,
            "version": "v0.0.0-20180127040603-bd5ef7bd5415",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/warnings.v0",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 53,
        "direct_count": 17,
        "indirect_count": 36
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 9,
        "merged_prs": 234,
        "open_issues": 2,
        "closed_ratio": 0,
        "closed_issues": 0,
        "closed_unmerged_prs": 45
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "yiftach-armis",
          "commits": 199,
          "avatar_url": "https://avatars.githubusercontent.com/u/91976623?v=4"
        },
        {
          "type": "User",
          "login": "YoavNathaniel-Silk",
          "commits": 76,
          "avatar_url": "https://avatars.githubusercontent.com/u/101593891?v=4"
        },
        {
          "type": "User",
          "login": "shb7628",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/10412898?v=4"
        },
        {
          "type": "User",
          "login": "dmitrysmirnov-armis",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/256165902?v=4"
        },
        {
          "type": "User",
          "login": "khyati-crest",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/171772694?v=4"
        },
        {
          "type": "User",
          "login": "rushabh-thakkar-17",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/206517601?v=4"
        },
        {
          "type": "User",
          "login": "solbenzeev-ship-it",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/276234308?v=4"
        },
        {
          "type": "User",
          "login": "tnachan",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/192694529?v=4"
        }
      ],
      "contributors_sampled": 8,
      "top_contributor_share": 0.668
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "armis-cli-marketplace-sample.yml",
        "ci.yml",
        "pr-security-scan.yml",
        "release-snapshot.yml",
        "release.yml",
        "reusable-lint.yml",
        "reusable-security-scan.yml",
        "security-scan.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "Pipfile.lock",
        "go.sum",
        "pdm.lock",
        "pnpm-lock.yaml",
        "poetry.lock",
        "uv.lock",
        "yarn.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 7/22 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 7,
            "reason": "dependency not pinned by hash detected -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 9,
            "reason": "SAST tool is not run on all commits -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 10,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 7,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "17 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "9d9b76a90cdd32853f8b0c3747b2f29c4c4888d8",
        "ran_at": "2026-07-28T08:28:06Z",
        "aggregate_score": 6.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T07:02:21Z",
      "oldest_open_prs": [
        {
          "number": 230,
          "created_at": "2026-06-18T09:30:38Z",
          "last_comment_at": "2026-06-18T09:42:12Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 275,
          "created_at": "2026-07-13T09:12:07Z",
          "last_comment_at": "2026-07-13T09:15:35Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 284,
          "created_at": "2026-07-20T09:11:36Z",
          "last_comment_at": "2026-07-20T09:14:10Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 285,
          "created_at": "2026-07-23T11:16:27Z",
          "last_comment_at": "2026-07-23T11:19:29Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 286,
          "created_at": "2026-07-27T08:14:56Z",
          "last_comment_at": "2026-07-27T10:02:40Z",
          "last_comment_author": "rushabh-thakkar-17"
        },
        {
          "number": 287,
          "created_at": "2026-07-27T09:11:10Z",
          "last_comment_at": "2026-07-27T09:14:26Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 288,
          "created_at": "2026-07-27T09:11:15Z",
          "last_comment_at": "2026-07-27T09:14:11Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 289,
          "created_at": "2026-07-27T09:11:26Z",
          "last_comment_at": "2026-07-27T09:15:11Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 290,
          "created_at": "2026-07-27T16:12:31Z",
          "last_comment_at": "2026-07-27T16:15:19Z",
          "last_comment_author": "github-actions"
        }
      ],
      "last_merged_pr_at": "2026-07-16T11:16:11Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 137,
          "created_at": "2026-04-02T15:36:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 241,
          "created_at": "2026-06-23T14:16:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ArmisSecurity/armis-cli",
    "host": "github.com",
    "name": "armis-cli",
    "owner": "ArmisSecurity"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 72,
      "inputs": {
        "security": 75,
        "vitality": 93,
        "community": 50,
        "governance": 54,
        "engineering": 86
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 93,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "commits_last_year": 340,
              "human_commit_share": 0.85,
              "days_since_last_push": 0,
              "active_weeks_last_year": 34
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "34/52 weeks with commits",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 34
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "340 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 340
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "releases_count": 47,
              "latest_release_tag": "v1.20.0",
              "releases_from_tags": false,
              "days_since_latest_release": 11,
              "mean_days_between_releases": 4.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "47 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 11 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~4.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 4.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 11,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 11 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 50,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "forks": 4,
              "stars": 9,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "9 stars",
                "points": 14.6,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "4 forks",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 86,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 27,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 8,
              "top_contributor_share": 0.668
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 67% of commits",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 67
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "8 contributors",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 37,
            "inputs": {
              "merged_prs": 234,
              "open_issues": 2,
              "closed_issues": 0,
              "issue_closed_ratio": 0,
              "closed_unmerged_prs": 45
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "0% of issues closed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 0
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "234/279 decided PRs merged",
                "points": 32.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 234,
                      "decided": 279
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 7/22 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "followers": 66,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "ArmisSecurity",
              "public_repos": 31,
              "account_age_days": 3207
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "66 followers of ArmisSecurity",
                "points": 13.1,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 66,
                      "login": "ArmisSecurity"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "31 public repos, account ~8 yr old",
                "points": 23,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 31
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 8
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/ArmisSecurity/armis-cli"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 11
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 11 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "48 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 48
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 86,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 75,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 6.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 7/22 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "17 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 53 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 53
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 53,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 53,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 93,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 10773
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "85 of 85 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 85,
                      "sampled": 85
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Pipfile.lock",
                "go.sum",
                "pdm.lock",
                "pnpm-lock.yaml",
                "poetry.lock",
                "uv.lock",
                "yarn.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.06,
              "toolchain_manifests": [
                "go.mod",
                "internal/supplychain/check/testdata/pom.xml"
              ],
              "dependency_bot_commit_share": 0.15
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "6 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "15 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 15,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 7,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 73357,
              "source_files_sampled": 269,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/269 source files over 60KB",
                "points": 54.2,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 269,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T08:28:31.287999Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/ArmisSecurity/armis-cli.svg",
  "full_name": "ArmisSecurity/armis-cli",
  "license_state": "custom",
  "license_spdx": null
}