uselagoon / lagoon-ssh-portal

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 25 paquetes directos y 58 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 83 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 4 tienen avisos conocidos, de los cuales 1 son directas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "hacktoberfest",
        "ssh",
        "k8s",
        "kubernetes",
        "lagoon"
      ],
      "is_fork": false,
      "size_kb": 1405,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 241108,
        "Makefile": 841,
        "Dockerfile": 311
      },
      "pushed_at": "2026-07-20T10:14:02Z",
      "created_at": "2021-11-17T06:02:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-20T10:13:09Z",
      "description": "Decentralised SSH portal for Lagoon.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://lagoon.sh",
      "name": "Lagoon",
      "type": "Organization",
      "login": "uselagoon",
      "company": null,
      "location": "United States of America",
      "followers": 43,
      "avatar_url": "https://avatars.githubusercontent.com/u/70366086?v=4",
      "created_at": "2020-08-28T07:09:00Z",
      "is_verified": null,
      "public_repos": 36,
      "account_age_days": 2160
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.47.2",
          "kind": "patch",
          "published_at": "2026-07-20T10:18:06Z"
        },
        {
          "tag": "v0.47.1",
          "kind": "patch",
          "published_at": "2026-02-19T06:19:47Z"
        },
        {
          "tag": "v0.46.1",
          "kind": "patch",
          "published_at": "2026-02-10T09:16:53Z"
        },
        {
          "tag": "v0.46.0",
          "kind": "minor",
          "published_at": "2026-01-19T13:16:52Z"
        },
        {
          "tag": "v0.45.0",
          "kind": "minor",
          "published_at": "2025-10-16T05:01:18Z"
        },
        {
          "tag": "v0.44.0",
          "kind": "minor",
          "published_at": "2025-10-16T04:13:27Z"
        },
        {
          "tag": "v0.43.1",
          "kind": "patch",
          "published_at": "2025-08-06T06:27:55Z"
        },
        {
          "tag": "v0.43.0",
          "kind": "minor",
          "published_at": "2025-07-09T15:58:40Z"
        },
        {
          "tag": "v0.42.0",
          "kind": "minor",
          "published_at": "2025-02-04T06:16:38Z"
        },
        {
          "tag": "v0.41.4",
          "kind": "patch",
          "published_at": "2024-12-13T06:42:14Z"
        },
        {
          "tag": "v0.41.3",
          "kind": "patch",
          "published_at": "2024-10-22T15:00:48Z"
        },
        {
          "tag": "v0.41.2",
          "kind": "patch",
          "published_at": "2024-10-18T07:36:35Z"
        },
        {
          "tag": "v0.41.1",
          "kind": "patch",
          "published_at": "2024-10-15T09:32:17Z"
        },
        {
          "tag": "v0.41.0",
          "kind": "minor",
          "published_at": "2024-10-15T07:13:24Z"
        },
        {
          "tag": "v0.40.0",
          "kind": "minor",
          "published_at": "2024-10-15T03:35:52Z"
        },
        {
          "tag": "v0.39.0",
          "kind": "minor",
          "published_at": "2024-10-04T03:42:09Z"
        },
        {
          "tag": "v0.38.0",
          "kind": "minor",
          "published_at": "2024-09-27T09:34:53Z"
        },
        {
          "tag": "v0.37.2",
          "kind": "patch",
          "published_at": "2024-08-16T04:07:36Z"
        },
        {
          "tag": "v0.37.1",
          "kind": "patch",
          "published_at": "2024-08-06T12:07:21Z"
        },
        {
          "tag": "v0.37.0",
          "kind": "minor",
          "published_at": "2024-07-02T04:31:52Z"
        },
        {
          "tag": "v0.36.2",
          "kind": "patch",
          "published_at": "2024-06-11T09:55:01Z"
        },
        {
          "tag": "v0.36.1",
          "kind": "patch",
          "published_at": "2024-06-10T09:18:53Z"
        },
        {
          "tag": "v0.36.0",
          "kind": "minor",
          "published_at": "2024-05-13T02:25:59Z"
        },
        {
          "tag": "v0.35.0",
          "kind": "minor",
          "published_at": "2024-05-10T03:08:01Z"
        },
        {
          "tag": "v0.34.1",
          "kind": "patch",
          "published_at": "2024-03-22T12:26:25Z"
        },
        {
          "tag": "v0.34.0",
          "kind": "minor",
          "published_at": "2024-02-26T06:48:47Z"
        },
        {
          "tag": "v0.33.3",
          "kind": "patch",
          "published_at": "2024-02-20T08:52:34Z"
        },
        {
          "tag": "v0.33.2",
          "kind": "patch",
          "published_at": "2024-02-16T09:38:10Z"
        },
        {
          "tag": "v0.33.1",
          "kind": "patch",
          "published_at": "2024-02-16T07:04:16Z"
        },
        {
          "tag": "v0.33.0",
          "kind": "minor",
          "published_at": "2024-01-18T13:37:21Z"
        },
        {
          "tag": "v0.32.0",
          "kind": "minor",
          "published_at": "2024-01-16T13:56:20Z"
        },
        {
          "tag": "v0.31.0",
          "kind": "minor",
          "published_at": "2023-12-18T09:23:42Z"
        },
        {
          "tag": "v0.30.1",
          "kind": "patch",
          "published_at": "2023-07-26T01:47:48Z"
        },
        {
          "tag": "v0.30.0",
          "kind": "minor",
          "published_at": "2023-06-30T06:01:29Z"
        },
        {
          "tag": "v0.29.1",
          "kind": "patch",
          "published_at": "2023-04-13T04:47:33Z"
        },
        {
          "tag": "v0.29.0",
          "kind": "minor",
          "published_at": "2023-04-13T04:45:04Z"
        },
        {
          "tag": "v0.28.1",
          "kind": "patch",
          "published_at": "2023-04-04T12:42:14Z"
        },
        {
          "tag": "v0.28.0",
          "kind": "minor",
          "published_at": "2023-02-15T03:39:47Z"
        },
        {
          "tag": "v0.27.2",
          "kind": "patch",
          "published_at": "2023-01-10T15:37:54Z"
        },
        {
          "tag": "v0.27.1",
          "kind": "patch",
          "published_at": "2022-12-23T07:49:15Z"
        },
        {
          "tag": "v0.27.0",
          "kind": "minor",
          "published_at": "2022-12-12T12:37:46Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2022-12-07T03:40:35Z"
        },
        {
          "tag": "v0.25.2",
          "kind": "patch",
          "published_at": "2022-12-05T10:20:23Z"
        },
        {
          "tag": "v0.25.1",
          "kind": "patch",
          "published_at": "2022-11-28T14:27:09Z"
        },
        {
          "tag": "v0.25.0",
          "kind": "minor",
          "published_at": "2022-11-24T03:45:54Z"
        },
        {
          "tag": "v0.24.0",
          "kind": "minor",
          "published_at": "2022-11-16T06:17:55Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2022-11-16T05:40:15Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2022-11-04T03:34:10Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2022-11-03T05:23:13Z"
        },
        {
          "tag": "v0.20.1",
          "kind": "patch",
          "published_at": "2022-09-08T07:58:06Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2022-09-08T06:46:48Z"
        },
        {
          "tag": "v0.19.1",
          "kind": "patch",
          "published_at": "2022-09-06T03:55:24Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2022-09-05T15:37:17Z"
        },
        {
          "tag": "v0.18.2",
          "kind": "patch",
          "published_at": "2022-08-09T07:01:56Z"
        },
        {
          "tag": "v0.18.1",
          "kind": "patch",
          "published_at": "2022-07-20T07:54:08Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2022-07-20T07:32:35Z"
        },
        {
          "tag": "v0.17.1",
          "kind": "patch",
          "published_at": "2022-07-20T06:37:04Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2022-03-28T13:11:02Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2022-03-28T11:45:00Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2022-03-17T00:16:16Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2022-03-14T12:49:24Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2022-03-14T10:33:27Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2022-03-11T06:13:13Z"
        },
        {
          "tag": "v0.11.2",
          "kind": "patch",
          "published_at": "2022-03-03T16:58:16Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2022-03-03T14:33:11Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2022-02-15T06:33:37Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2022-02-14T14:09:28Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2022-02-14T12:15:49Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2022-02-08T13:43:56Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2022-02-07T15:19:32Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2022-02-07T13:04:22Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2022-02-04T06:24:43Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2022-02-03T14:50:49Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2022-02-03T02:30:43Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2022-02-02T02:54:25Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2022-02-01T02:58:29Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2022-01-28T07:43:10Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2022-01-28T07:24:39Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2022-01-25T00:32:45Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2021-11-22T12:20:03Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2021-11-22T12:04:28Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2021-11-22T11:53:22Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2021-11-22T11:33:15Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "67c4147db227179df6c338e4104c267130225b2d",
          "body": "Avoid logging an error that is always nil in the case of ID mismatch",
          "is_bot": false,
          "headline": "Merge pull request #599 from uselagoon/mismatch-logging-fix",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-07-20T10:09:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f7cd6e46fce44891495c99b1825ec6f817f7942",
          "body": "Also update mockgen package and regenerate mocks.",
          "is_bot": false,
          "headline": "chore: add ID mismatch test and interface for nats.Conn",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-07-20T10:04:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f2d4a0c3b566300aa6d5db47d31ada40d2f3029",
          "body": null,
          "is_bot": false,
          "headline": "fix: avoid logging error that is always nil",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-07-20T10:04:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75a93bc22f9b1b10aab352bb88499c22ad6f657c",
          "body": "…ub-actions-3c926d06c3\n\nchore(deps): bump the github-actions group across 1 directory with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #597 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-07-01T03:06:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0539734e575ffca829f1386f09c65c95b3d5883b",
          "body": "…updates\n\nBumps the github-actions group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/setup-go](https://github.com/actions/setup-go) | `6.4.0` | `6.5.0` |\n| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.2` | `7.2.\n[…]\n\n  dependency-version: 7.2.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group across 1 directory with 5 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T02:42:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee35f4650bd223b1299ea09c4abf60d9b01036f7",
          "body": "…ce36e\n\nchore(deps): bump alpine from 3.23 to 3.24 in the docker group",
          "is_bot": false,
          "headline": "Merge pull request #595 from uselagoon/dependabot/docker/docker-2adcb…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-07-01T02:38:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0412486aa7e1da5834af7c4e98c790205b5716fc",
          "body": "…b4f1052d\n\nchore(deps): bump the gomod group with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #596 from uselagoon/dependabot/go_modules/gomod-63…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-07-01T02:38:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9de6cf3f869aa353138021fbc137a9a558db9dcf",
          "body": "…ons/checkout-7.0.0\n\nchore(deps): bump actions/checkout from 6.0.2 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #598 from uselagoon/dependabot/github_actions/acti…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-07-01T02:37:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e282df225bfed3e6f95e0b67b7ec12b8a5b01725",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 6.0.2 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T00:53:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b42830051ee3c44bf16d22ec02df2bc6bd7c715",
          "body": "Bumps the gomod group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.36\n[…]\nlient-go\n  dependency-version: 0.36.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: gomod\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the gomod group with 5 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T00:52:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "36afb26b0724558ecd995942f7575f56b738adca",
          "body": "Bumps the docker group with 1 update: alpine.\n\n\nUpdates `alpine` from 3.23 to 3.24\n\n---\nupdated-dependencies:\n- dependency-name: alpine\n  dependency-version: '3.24'\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: docker\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump alpine from 3.23 to 3.24 in the docker group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T00:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ffd873fe9c29f5cfa075dced05706b08034e495",
          "body": "…7b201cca\n\nchore(deps): bump the gomod group with 6 updates",
          "is_bot": false,
          "headline": "Merge pull request #592 from uselagoon/dependabot/go_modules/gomod-88…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-06-01T13:15:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce97f1d50198f488c3fb2fb726ba9d9764dcabb5",
          "body": "…ub-actions-b63e5b766d\n\nchore(deps): bump the github-actions group with 8 updates",
          "is_bot": false,
          "headline": "Merge pull request #593 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-06-01T13:14:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7aff1d29a7b7125faa31e1a38f816c08e8579aa",
          "body": "…ons/dependency-review-action-5.0.0\n\nchore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0",
          "is_bot": false,
          "headline": "Merge pull request #594 from uselagoon/dependabot/github_actions/acti…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-06-01T13:11:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "948dc93e886caf255cfad40ceaecce36ffc5a9f6",
          "body": "Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.9.0 to 5.0.0.\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/2031cfc080254a8a887f58cffee85186f\n[…]\ne: actions/dependency-review-action\n  dependency-version: 5.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T01:37:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "05fa7a0ada18ad1a3500f01953f5ff2a3a4971a1",
          "body": "Bumps the github-actions group with 8 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.1` | `7.2.2` |\n| [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.2.0` |\n| [docker/setup-bu\n[…]\n  dependency-version: 4.36.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 8 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T01:37:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e0368d3482c781557aac7ca25ae3a4f53e4dba3",
          "body": "Bumps the gomod group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.51.0` | `1.52.0` |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |\n| [golang.org/x/crypt\n[…]\nlient-go\n  dependency-version: 0.36.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: gomod\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the gomod group with 6 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T01:36:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b7a154a9182132587d6f8646edb018fdf3426ee2",
          "body": "Update dependencies",
          "is_bot": false,
          "headline": "Merge pull request #591 from uselagoon/dependency-update",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-05-05T05:06:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b31a32226b84cca62a09fd612b8025071f81530a",
          "body": "* repr fix merged upstream\n* mock fork updated",
          "is_bot": false,
          "headline": "chore: update dependencies",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-05-05T05:00:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed3051980920ad22f2f495beb47db1ddd9c18a2c",
          "body": "chore(deps): bump alpine from `2510918` to `5b10f43`",
          "is_bot": false,
          "headline": "Merge pull request #588 from uselagoon/dependabot/docker/alpine-5b10f43",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-05-01T04:18:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73282df18bff4f4e058bd32d64c7f0c0342357bc",
          "body": "…169d92f8\n\nchore(deps): bump the gomod group with 11 updates",
          "is_bot": false,
          "headline": "Merge pull request #589 from uselagoon/dependabot/go_modules/gomod-07…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-05-01T04:18:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ac113bbd597e37a544146bee3f03e9a934143ef",
          "body": "…ub-actions-fa935a8eb8\n\nchore(deps): bump the github-actions group with 6 updates",
          "is_bot": false,
          "headline": "Merge pull request #590 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-05-01T04:08:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82798760423fe500b1acb490a1807d5378710581",
          "body": "Bumps the github-actions group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.0.0` | `7.2.1` |\n| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` |\n| [docker/\n[…]\n  dependency-version: 4.35.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 6 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T01:02:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e56c409a2f2a70df8a9ecb2dd0d3e516e21d9d24",
          "body": "Bumps the gomod group with 11 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/alecthomas/kong](https://github.com/alecthomas/kong) | `1.14.0` | `1.15.0` |\n| [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.9.3` | `1.10.0` |\n| [github.com/moby/spdystre\n[…]\non: 0.0.0-20260210185600-b8788abfbbc2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: gomod\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the gomod group with 11 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T01:01:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "db92926f099e8f8a104f532ca9bdaad21c859665",
          "body": "Bumps alpine from `2510918` to `5b10f43`.\n\n---\nupdated-dependencies:\n- dependency-name: alpine\n  dependency-version: '3.23'\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump alpine from `2510918` to `5b10f43`",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T01:01:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d99e62ec5c1e578c7cb1d4cb9ea6252c2a3b612",
          "body": "…er/setup-buildx-action-4.0.0\n\nchore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0",
          "is_bot": false,
          "headline": "Merge pull request #585 from uselagoon/dependabot/github_actions/dock…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-04-07T14:59:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6aab73c64a40787d20e2edac82fe0d3b6e19cfdd",
          "body": "…om/go-jose/go-jose/v4-4.1.4\n\nchore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4",
          "is_bot": false,
          "headline": "Merge pull request #586 from uselagoon/dependabot/go_modules/github.c…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-04-07T11:37:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f7f031ce792c5d686661a2866164f2addeeb9dd",
          "body": "Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.5 to 4.1.4.\n- [Release notes](https://github.com/go-jose/go-jose/releases)\n- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.5...v4.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/go-jose/go-jose/v4\n  dependency-version: 4.1.4\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-03T03:40:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8846966b92529ad6b824eab8aaf5175d78c534a",
          "body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.0.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/8d2750c68a42422c14e847fe6c8ac0403b4cbd6f...4d04d5d9486b7\n[…]\ncy-name: docker/setup-buildx-action\n  dependency-version: 4.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-01T01:31:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "109d535bd2da4363971ac31ee5feddc391d7292d",
          "body": "…er/metadata-action-6.0.0\n\nchore(deps): bump docker/metadata-action from 5.10.0 to 6.0.0",
          "is_bot": false,
          "headline": "Merge pull request #584 from uselagoon/dependabot/github_actions/dock…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-04-01T01:28:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2392f4753c32ad35ce6dcbd5c1f3e1247497c98b",
          "body": "…er/build-push-action-7.0.0\n\nchore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #583 from uselagoon/dependabot/github_actions/dock…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-04-01T01:28:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c80f8fd291ac54940647e063248fd03cfbe114b",
          "body": "…er/login-action-4.0.0\n\nchore(deps): bump docker/login-action from 3.7.0 to 4.0.0",
          "is_bot": false,
          "headline": "Merge pull request #582 from uselagoon/dependabot/github_actions/dock…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-04-01T01:28:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a60c860991aa3b0ae42e964ab530896757cb962",
          "body": "…ub-actions-3ceb2315ea\n\nchore(deps): bump the github-actions group with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #581 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-04-01T01:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6394d7e90a8fbd8016372f008cd93b319b37b58c",
          "body": "…c3062897\n\nchore(deps): bump the gomod group with 10 updates",
          "is_bot": false,
          "headline": "Merge pull request #580 from uselagoon/dependabot/go_modules/gomod-7b…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-04-01T01:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65e870cf198df08aa06f564257605f80ce9f4eed",
          "body": "Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0.\n- [Release notes](https://github.com/docker/metadata-action/releases)\n- [Commits](https://github.com/docker/metadata-action/compare/c299e40c65443455700f0fdfc63efafe5b349051...030e881283bb7a6894de51c315a6b\n[…]\nndency-name: docker/metadata-action\n  dependency-version: 6.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump docker/metadata-action from 5.10.0 to 6.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-01T00:54:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5874b6b553d0e0eb4a6048f96d8b3658c5a38e42",
          "body": "Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.19.2 to 7.0.0.\n- [Release notes](https://github.com/docker/build-push-action/releases)\n- [Commits](https://github.com/docker/build-push-action/compare/10e90e3645eae34f1e60eeb005ba3a3d33f178e8...d08e5c354a6adb9ed3448\n[…]\nency-name: docker/build-push-action\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-01T00:54:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2894ea897954763c1e69927deb03ef0bd30ddd9f",
          "body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 3.7.0 to 4.0.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/c94ce9fb468520275223c153574b00df6fe4bcc9...b45d80f862d83dbcd57f89517bcf500b2ab88fb2)\n\n[…]\nependency-name: docker/login-action\n  dependency-version: 4.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump docker/login-action from 3.7.0 to 4.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-01T00:53:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "628bd256dc0fce76a1ede674a438ef27d3c91cd1",
          "body": "Bumps the github-actions group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/setup-go](https://github.com/actions/setup-go) | `6.3.0` | `6.4.0` |\n| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.0` | `8.0.1` |\n| [vladopajic/go-test-coverage\n[…]\n  dependency-version: 0.24.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 5 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-01T00:53:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e6b8f7868458fa8ea2ae64e15dc267515fa69f3",
          "body": "Bumps the gomod group with 10 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.49.0` | `1.50.0` |\n| [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc) | `3.45.4` | `3.45.6` |\n| [go.opentelemetry.io/otel](https://\n[…]\nlient-go\n  dependency-version: 0.35.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: gomod\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the gomod group with 10 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-01T00:53:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5879fdbeb713a6842cce77f54afddeebf3f222e4",
          "body": "chore: switch to actions/attest",
          "is_bot": false,
          "headline": "Merge pull request #579 from uselagoon/attest-action",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-03-04T08:11:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "691ba3d632f31cff7cbe8d865e1e279495db9365",
          "body": "…062adad0\n\nchore(deps): bump the gomod group with 9 updates",
          "is_bot": false,
          "headline": "Merge pull request #573 from uselagoon/dependabot/go_modules/gomod-cf…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-03-04T08:11:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e679e5f72c88fb95f3b0ef38be70009c7bd8ab3f",
          "body": "…ub-actions-a597afe8ee\n\nchore(deps): bump the github-actions group with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #574 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-03-04T08:08:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "daf7ddf9ae0e5872d8f9081e50cb2377d1574381",
          "body": "Bumps the github-actions group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/setup-go](https://github.com/actions/setup-go) | `6.2.0` | `6.3.0` |\n| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `6.19.2` |\n| [actions/dependency-review-a\n[…]\n  dependency-version: 0.23.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 5 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-04T07:52:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b5ad36458994b926a3afd3d3cc89c3c3fcbaee0",
          "body": "actions/attest-build-provenance is deprecated\nhttps://github.com/actions/attest-build-provenance/releases/tag/v4.0.0",
          "is_bot": false,
          "headline": "chore: switch to actions/attest",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-03-04T07:51:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53e6607814823b8acf8be6c7067f6bb30fb7e3eb",
          "body": "…ons/download-artifact-8.0.0\n\nchore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0",
          "is_bot": false,
          "headline": "Merge pull request #576 from uselagoon/dependabot/github_actions/acti…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-03-04T07:47:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8c30d31678503daaeecd56b348c1614e3e567e7",
          "body": "…ons/upload-artifact-7.0.0\n\nchore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #577 from uselagoon/dependabot/github_actions/acti…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-03-04T07:47:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "659223915271443b1577e48753ee00c953dd6c67",
          "body": "…leaser/goreleaser-action-7.0.0\n\nchore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #578 from uselagoon/dependabot/github_actions/gore…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-03-04T07:46:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e07fb2d40715734df137997e47e6b98de471976b",
          "body": "Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.4.0 to 7.0.0.\n- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)\n- [Commits](https://github.com/goreleaser/goreleaser-action/compare/e435ccd777264be153ace6237001ef4d979d3a7a...ec59f4\n[…]\n-name: goreleaser/goreleaser-action\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T00:53:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77e87f8a0f0d27ac5a8dc63b22a9d85c94674854",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76f\n[…]\ndency-name: actions/upload-artifact\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T00:53:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f4f9cda8d10dca397f039ed3fe35d1e52393c393",
          "body": "Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7.0.0 to 8.0.0.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/37930b1c2abaa49bbe596cd826c3c89aef350131...70fc10c6e5e1ce46ad\n[…]\nncy-name: actions/download-artifact\n  dependency-version: 8.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T00:53:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "679b85d1449162af8d8ffb5c5fef4c9d9a9beab2",
          "body": "Bumps the gomod group with 9 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/alecthomas/kong](https://github.com/alecthomas/kong) | `1.13.0` | `1.14.0` |\n| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.48.0` | `1.49.0` |\n| [github.com/zitadel/oidc/v3](http\n[…]\nlient-go\n  dependency-version: 0.35.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: gomod\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the gomod group with 9 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T00:52:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "df317019fab66d26c344dac98af8f6189a3a6d81",
          "body": "…io/edwards25519-1.1.1\n\nchore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1",
          "is_bot": false,
          "headline": "Merge pull request #572 from uselagoon/dependabot/go_modules/filippo.…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-19T06:17:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24691d2ffa11fa58193ed743255256340117dcbb",
          "body": "Bumps [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) from 1.1.0 to 1.1.1.\n- [Commits](https://github.com/FiloSottile/edwards25519/compare/v1.1.0...v1.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: filippo.io/edwards25519\n  dependency-version: 1.1.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-19T06:14:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0aaa4504bdcc931acf2d50e2ea818dfd2337a42b",
          "body": "Build fixes and minor code mondernisation",
          "is_bot": false,
          "headline": "Merge pull request #571 from uselagoon/build-fixes",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-19T06:12:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b29bc75696046e07cac8f3bb8126d3883c9cef6",
          "body": "The previous release automation was hitting https://github.com/goreleaser/goreleaser/issues/5597",
          "is_bot": false,
          "headline": "fix: use dockers_v2 in goreleaser for advanced docker registry manifests",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-19T05:58:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "158b14fb911498b6511945d47a58850c3001c3be",
          "body": null,
          "is_bot": false,
          "headline": "fix: minor refactors from go fix",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-19T05:54:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab3b8655df2006c972565e03b4f7646439736142",
          "body": "feat: implement lagoon system logs",
          "is_bot": false,
          "headline": "Merge pull request #570 from uselagoon/build-logs",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-19T05:19:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1dc98684526c21c967fdaa60cb014f5d9b25bf79",
          "body": "Return (and log) a more informative error when a user specifies a\nselector that matches no pods.",
          "is_bot": false,
          "headline": "feat: improve selector mismatch error",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-16T08:48:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2f04af08e2c5cbe7083b9b983c6c57f66c71249",
          "body": null,
          "is_bot": false,
          "headline": "chore: update README",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T15:32:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "581ccef864023a0ccdbe403f19f264683a41d864",
          "body": "Refactor the session handler to make it easier to handle other session\ntypes than just exec and container logs, and take advantage of the new\ndesign to implement lagoon system logs.",
          "is_bot": false,
          "headline": "feat: implement lagoon system logs",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T15:32:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "509453b81a57cce8bf553a2009168e49b5372d63",
          "body": "Fix memory leak in log streaming code",
          "is_bot": false,
          "headline": "Merge pull request #569 from uselagoon/memleak",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T09:07:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b13da1060dbc32deb89a6cb0793562c7e990aaa9",
          "body": "This makes the linter configuration consistent when running both locally\nand in CI.",
          "is_bot": false,
          "headline": "chore: move golangci-lint config into config file",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T08:13:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf62e5e9899ae93377bad54714ce3ce476b4d5f8",
          "body": "A different logStreamID value was being deleted than the one being\nstored, so the map was never having any values deleted!\n\nInstead, define a variable to hold the map key and use the same variable\nin the call to Delete() to ensure the same value is used.",
          "is_bot": false,
          "headline": "fix: memory leak in k8s log streaming logic",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T08:07:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d66cbd593b9f7dc43dfeb241a1e76d030685f416",
          "body": null,
          "is_bot": false,
          "headline": "chore: minor optimization",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T08:07:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "438f6777ded01bff8dda3aed91dff2e60f6c5074",
          "body": null,
          "is_bot": false,
          "headline": "chore: improve error message",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T08:07:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6228baf3746e192886fa921c7300c4edea250aaa",
          "body": "Stale cache can mess with coverage results.",
          "is_bot": false,
          "headline": "chore: avoid test cache when calculating coverage",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T08:07:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "740c442b2622bacb0292d5a0f630d99effd85f70",
          "body": null,
          "is_bot": false,
          "headline": "chore: refactor to use WaitGroup.Go()",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-10T08:07:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f398f1a85a385e6cd402619fa81c5d8e921f73ea",
          "body": "chore(deps): bump alpine from `865b95f` to `2510918`",
          "is_bot": false,
          "headline": "Merge pull request #566 from uselagoon/dependabot/docker/alpine-2510918",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-02T03:48:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dca7f41749d9c872c088099ced3956718cb8c9f3",
          "body": "…60ab1a81\n\nchore(deps): bump the gomod group with 4 updates",
          "is_bot": false,
          "headline": "Merge pull request #567 from uselagoon/dependabot/go_modules/gomod-8d…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-02T03:48:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9448a283bc245fcc9de98d27919e428e3d293bb4",
          "body": "…ub-actions-8942628814\n\nchore(deps): bump the github-actions group with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #568 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-02-02T03:48:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e3ef4fb30d64c4de60c232cfb909356ae1d6812",
          "body": "Bumps the github-actions group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` |\n| [actions/setup-go](https://github.com/actions/setup-go) | `6.1.0` | `6.2.0` |\n| [docker/login-action](https://github.com/docke\n[…]\n\n  dependency-version: 3.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 5 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-01T00:52:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "36ce800e65acd33cdd3f49d8897f00a0eeddbe36",
          "body": "Bumps the gomod group with 4 updates: [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt), [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc), [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/oauth2](https://github.com/golang/oauth2).\n\n\nUpdates `gith\n[…]\nx/oauth2\n  dependency-version: 0.34.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: gomod\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the gomod group with 4 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-01T00:51:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "58109fd6ef98495194d6f2a2003ba29cdbd5993c",
          "body": "Bumps alpine from `865b95f` to `2510918`.\n\n---\nupdated-dependencies:\n- dependency-name: alpine\n  dependency-version: '3.23'\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump alpine from `865b95f` to `2510918`",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-01T00:50:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44288b82481c9791799ae164ef82d8fbbc617f87",
          "body": "feat: update ssh connection algorithms",
          "is_bot": false,
          "headline": "Merge pull request #565 from uselagoon/update-ssh-algos",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-19T13:10:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ef91b300f67c17489ca44ac5f6ea81d848b835f",
          "body": "Improve the error message returned to users when logs are disabled",
          "is_bot": false,
          "headline": "Merge pull request #564 from uselagoon/friendly-logs-disabled-message",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-19T13:09:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d0473376cd33d17499ce5d06b94befcf525a554",
          "body": "* Use exported SSH package constants instead of magic strings.\n* Remove the optional and \"insecure\" hmac-sha1-96 MAC.\n* Don't explicitly specify the non-standard curve25519-sha256@libssh.org\n  key exchange method. This added implicitly by golang.org/x/crypto/ssh\n  when specifying the curve25519-sha256 method.\n* Add the recently standardised ML-KEM based key exchange method.\n  This fixes the warning about not using a PQ algorithm issued by\n  OpenSSH client since v10.1.",
          "is_bot": false,
          "headline": "feat: update ssh connection algorithms",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-19T12:47:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5463a8d1d123ab1811a5ff0791e800d4a1ef2593",
          "body": null,
          "is_bot": false,
          "headline": "feat: more informative message for user when logs are not enabled",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-19T09:50:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9570ad1f7d07e70762ba58524e35dbdb201725e",
          "body": null,
          "is_bot": false,
          "headline": "chore: add test for friendlier message when logs are disabled",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-19T09:48:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ceb0923dcda6df8ecfc16ef789fe73e738abfce",
          "body": "chore: refactor to use \"go tool\" for code generation",
          "is_bot": false,
          "headline": "Merge pull request #563 from uselagoon/go-tool",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-19T09:34:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a272895b86f47884c3c94ba3181b52727bb0f149",
          "body": "mockgen dependency has CC0 licensing (AKA public-domain)",
          "is_bot": false,
          "headline": "chore: add mockgen dependency licence to allowlist",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-19T09:27:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4724495d17e11a0c83dd5dc99203ddcdbb71b342",
          "body": "This change also bumps the version of mockgen used, so there is a bit of\nchurn in the generated mocks.",
          "is_bot": false,
          "headline": "chore: refactor to use \"go tool\" for code generation",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-16T08:40:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ea587c019cbb31b17853d2af3e317ded1e49126",
          "body": "…0ec13ceb\n\nchore(deps): bump the gomod group across 1 directory with 11 updates",
          "is_bot": false,
          "headline": "Merge pull request #560 from uselagoon/dependabot/go_modules/gomod-03…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-06T13:12:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "216efce14daae8c6f44d9c5e8b6b328509ac88da",
          "body": null,
          "is_bot": false,
          "headline": "chore: switch to a alecthomas/repr fork to fix upstream bug",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-06T13:06:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "838edab7b2cd0a602e740ed27dfdb0dc15fac049",
          "body": "Bumps the gomod group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/alecthomas/kong](https://github.com/alecthomas/kong) | `1.12.1` | `1.13.0` |\n| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.47.0` | `1.48.0` |\n| [github.com/zi\n[…]\non: 0.0.0-20251002143259-bc988d571ff4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: gomod\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the gomod group across 1 directory with 11 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-05T12:54:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1cac91de2aae4cb800fbcbc6fa0183b2e82f31e9",
          "body": "chore: update dependency review action licence allowlist",
          "is_bot": false,
          "headline": "Merge pull request #562 from uselagoon/update-licence-allowlist",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-05T12:53:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9eb119bbb4ad852f4f4afb6b012636cd3283c9b",
          "body": null,
          "is_bot": false,
          "headline": "chore: update dependency review action licence allowlist",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-05T12:46:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90262158d812bbaad8c74cb0579820a330a00eff",
          "body": "…b6e22\n\nchore(deps): bump alpine from 3.22 to 3.23 in the docker group",
          "is_bot": false,
          "headline": "Merge pull request #559 from uselagoon/dependabot/docker/docker-60be0…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-05T12:39:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7afa37a51ac6f9082e140901f0936fa890f9c4d9",
          "body": "…ub-actions-9e1d7ed587\n\nchore(deps): bump the github-actions group with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #561 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2026-01-05T12:37:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce294db12355b152b572c03ea109a273640de3a7",
          "body": "Bumps the github-actions group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `6.0.1` |\n| [vladopajic/go-test-coverage](https://github.com/vladopajic/go-test-coverage) | `2.18.0` | `2.18.3` |\n| [golangci/golangci-lin\n[…]\n\n  dependency-version: 3.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 5 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-01T00:02:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "040fc0d57a90b978e8b7726feca1753381f9c169",
          "body": "Bumps the docker group with 1 update: alpine.\n\n\nUpdates `alpine` from 3.22 to 3.23\n\n---\nupdated-dependencies:\n- dependency-name: alpine\n  dependency-version: '3.23'\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: docker\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump alpine from 3.22 to 3.23 in the docker group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-01T00:01:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dff1c7b623bc1775b06884f5a5277fe840e27cbe",
          "body": "…rg/x/crypto-0.45.0\n\nchore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0",
          "is_bot": false,
          "headline": "Merge pull request #552 from uselagoon/dependabot/go_modules/golang.o…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2025-12-02T01:15:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48be8111d536ec7dd2e9387c759e2b6d20469639",
          "body": "…ub-actions-63f37e560d\n\nchore(deps): bump github/codeql-action from 4.31.5 to 4.31.6 in the github-actions group across 1 directory",
          "is_bot": false,
          "headline": "Merge pull request #557 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2025-12-01T12:11:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5490fb6d4597690e45ec4ee705b453a72ffacf40",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version number too",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2025-12-01T12:07:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09627d1e5bde9c551890e3d9af6e065641abfb79",
          "body": "Bumps the github-actions group with 1 update in the / directory: [github/codeql-action](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action` from 4.31.5 to 4.31.6\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-\n[…]\n  dependency-version: 4.31.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github/codeql-action",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T09:59:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3cd0e8174a23d5d699958a38790be36a402f6be",
          "body": "…ub-actions-f1822d5120\n\nchore(deps): bump the github-actions group with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #554 from uselagoon/dependabot/github_actions/gith…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2025-12-01T09:26:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae56129b1d4824614ab083b4c7070ec3bd258b6a",
          "body": "Bumps the github-actions group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/setup-go](https://github.com/actions/setup-go) | `6.0.0` | `6.1.0` |\n| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.8.0` | `5.10.0` |\n| [vladopajic/go-test-coverage](htt\n[…]\n  dependency-version: 4.31.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 5 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T09:24:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "166fe866d6153edc801be2613642bc2103647b67",
          "body": "…ons/checkout-6.0.0\n\nchore(deps): bump actions/checkout from 5.0.0 to 6.0.0",
          "is_bot": false,
          "headline": "Merge pull request #555 from uselagoon/dependabot/github_actions/acti…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2025-12-01T09:17:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71e9f349b79fc8274021b14d930d7ca2c03241c9",
          "body": "…ngci/golangci-lint-action-9.1.0\n\nchore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0",
          "is_bot": false,
          "headline": "Merge pull request #556 from uselagoon/dependabot/github_actions/gola…",
          "author_name": "Scott Leggett",
          "author_login": "smlx",
          "committed_at": "2025-12-01T09:17:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25f1ca3ab90614912c78b55a215178c72635ab7a",
          "body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 8.0.0 to 9.1.0.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/4afd733a84b1f43292c63897423277bb7f4313a9...e7\n[…]\nname: golangci/golangci-lint-action\n  dependency-version: 9.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T00:02:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f48c5def53b102237966b3a26b40d93c3b96db19",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f8\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 6.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 5.0.0 to 6.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T00:02:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 83,
      "commits_last_year": 141,
      "latest_release_at": "2026-07-20T10:18:06Z",
      "latest_release_tag": "v0.47.2",
      "releases_from_tags": false,
      "days_since_last_push": 8,
      "active_weeks_last_year": 22,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 64.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 0,
      "stars": 2,
      "watchers": 2,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 17202,
      "source_files_sampled": 79,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 21
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.5",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 14
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 14
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 4
        },
        "advisory_count": 4,
        "affected_count": 4,
        "assessed_count": 83,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/DATA-DOG/go-sqlmock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.2"
        },
        {
          "name": "github.com/MicahParks/keyfunc/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.0"
        },
        {
          "name": "github.com/alecthomas/assert/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.11.0"
        },
        {
          "name": "github.com/alecthomas/kong",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.15.0"
        },
        {
          "name": "github.com/anmitsu/go-shlex",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20200514113438-38f4b401e2be"
        },
        {
          "name": "github.com/davecgh/go-spew",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.2-0.20180830191138-d8f796af33cc"
        },
        {
          "name": "github.com/gliderlabs/ssh",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.8"
        },
        {
          "name": "github.com/go-sql-driver/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/golang-jwt/jwt/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.3.1"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.1-0.20240806143717-0e97ed3b5379"
        },
        {
          "name": "github.com/jmoiron/sqlx",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        },
        {
          "name": "github.com/moby/spdystream",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.1"
        },
        {
          "name": "github.com/nats-io/nats.go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.52.0"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.2"
        },
        {
          "name": "github.com/zitadel/oidc/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.47.5"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.uber.org/mock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.53.0"
        },
        {
          "name": "golang.org/x/exp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20230817173708-d852ddb80c63"
        },
        {
          "name": "golang.org/x/oauth2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.0"
        },
        {
          "name": "golang.org/x/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.15.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260210185600-b8788abfbbc2"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/alecthomas/assert/v2",
            "direct": true,
            "version": "v2.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/kong",
            "direct": true,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anmitsu/go-shlex",
            "direct": true,
            "version": "v0.0.0-20200514113438-38f4b401e2be",
            "ecosystem": "go"
          },
          {
            "name": "github.com/data-dog/go-sqlmock",
            "direct": true,
            "version": "v1.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": true,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gliderlabs/ssh",
            "direct": true,
            "version": "v0.3.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-sql-driver/mysql",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": true,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.1-0.20240806143717-0e97ed3b5379",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmoiron/sqlx",
            "direct": true,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/micahparks/keyfunc/v2",
            "direct": true,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/spdystream",
            "direct": true,
            "version": "v0.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nats.go",
            "direct": true,
            "version": "v1.52.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zitadel/oidc/v3",
            "direct": true,
            "version": "v3.47.5",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": true,
            "version": "v0.0.0-20230817173708-d852ddb80c63",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": true,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": true,
            "version": "v0.0.0-20260210185600-b8788abfbbc2",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/repr",
            "direct": false,
            "version": "v0.5.3-0.20260502073839-3f2070383259",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dmarkham/enumer",
            "direct": false,
            "version": "v1.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/securecookie",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.4-0.20250319132907-e064f32e3674",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hexops/gotextdiff",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muhlemmer/gu",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nkeys",
            "direct": false,
            "version": "v0.4.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nuid",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pascaldekloe/name",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.66.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.16.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zitadel/logging",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zitadel/schema",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260317180543-43fb72c5454a",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/streaming",
            "direct": false,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 83,
        "direct_count": 25,
        "indirect_count": 58
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 466,
        "open_issues": 2,
        "closed_ratio": 0.909,
        "closed_issues": 20,
        "closed_unmerged_prs": 111
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "smlx",
          "commits": 563,
          "avatar_url": "https://avatars.githubusercontent.com/u/861778?v=4"
        },
        {
          "type": "User",
          "login": "shreddedbacon",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/9973880?v=4"
        },
        {
          "type": "User",
          "login": "rocketeerbkw",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/92499?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.989
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build.yaml",
        "coverage.yaml",
        "dependency-review.yaml",
        "lint.yaml",
        "ossf-analysis.yaml",
        "release.yaml",
        "test.yaml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yaml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 4,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 2,
            "reason": "badge detected: InProgress",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/2 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 5 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 6,
            "reason": "4 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "67c4147db227179df6c338e4104c267130225b2d",
        "ran_at": "2026-07-29T00:06:34Z",
        "aggregate_score": 7.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T19:49:54Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-20T10:12:02Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 407,
          "created_at": "2024-03-01T00:41:51Z",
          "last_comment_at": "2024-10-25T08:41:38Z",
          "last_comment_author": "smlx"
        },
        {
          "number": 532,
          "created_at": "2025-07-29T08:16:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/uselagoon/lagoon-ssh-portal",
    "host": "github.com",
    "name": "lagoon-ssh-portal",
    "owner": "uselagoon"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 75,
        "vitality": 76,
        "community": 24,
        "governance": 52,
        "engineering": 70
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 76,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "commits_last_year": 141,
              "human_commit_share": 0.67,
              "days_since_last_push": 8,
              "active_weeks_last_year": 22
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 8 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "22/52 weeks with commits",
                "points": 15.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "141 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 141
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 83,
            "inputs": {
              "releases_count": 83,
              "latest_release_tag": "v0.47.2",
              "releases_from_tags": false,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 64.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "83 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 83
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~64.9 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 64.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 8,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 8 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 2,
              "watchers": 2,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "2 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "2 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 52,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 23,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.989
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 99% of commits",
                "points": 0.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "merged_prs": 466,
              "open_issues": 2,
              "closed_issues": 20,
              "issue_closed_ratio": 0.909,
              "closed_unmerged_prs": 111
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "91% of issues closed",
                "points": 42.5,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 91
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "466/577 decided PRs merged",
                "points": 30.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 466,
                      "decided": 577
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "followers": 43,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "uselagoon",
              "public_repos": 36,
              "account_age_days": 2160
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "43 followers of uselagoon",
                "points": 11.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 43,
                      "login": "uselagoon"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "36 public repos, account ~5 yr old",
                "points": 23.2,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 36
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 5
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 70,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [
                "hacktoberfest",
                "ssh",
                "k8s",
                "kubernetes",
                "lagoon"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 75,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "badge detected: InProgress",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "25 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "4 existing vulnerabilities detected",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 83 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 83
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 4,
              "affected_packages": 4,
              "assessed_packages": 83,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 4",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/crypto v0.53.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/crypto v0.53.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 83,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 7
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 74,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "67 of 67 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 67,
                      "sampled": 67
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.33
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "33 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 33,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 17202,
              "source_files_sampled": 79,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/79 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 79,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch go package 'github.com/uselagoon/ssh-portal' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-29T00:06:53.180854Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/u/uselagoon/lagoon-ssh-portal.svg",
  "full_name": "uselagoon/lagoon-ssh-portal",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}