Public recordGood
Software health reportschema 0.27.0 · metrics 1.14.0 · 2026-07-30 02:09 UTC
ClickHouse / clickhouse-operator
Official Kubernetes Operator for ClickHouse®
ClickHouse/clickhouse-operator holds a health index of 78 out of 100, placing it in the Good band. It scores highest on Vitality (91/100) and lowest on Community & Adoption (58/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.
78
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
78
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
ClickHouseOrganization
1,945 followers359 public repossince Sep 2019
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/ClickHouse/clickhouse-operator | v0.0.7 | - | 7 | 9 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
91
Development activity
92Excellent
How it's scored
| 36/36 | Push recency — last push 1 days ago |
| 28.4/36 | Commit cadence — 41/52 weeks with commits |
| 18/18 | Commit volume — 193 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 193 |
| human_commit_share | 0.89 |
| days_since_last_push | 1 |
| active_weeks_last_year | 41 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 7 releases published |
| 36/36 | Release recency — latest release 9 days ago |
| 27/27 | Release cadence — a release every ~28.7 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 7 |
| latest_release_tag | v0.0.7 |
| releases_from_tags | no |
| days_since_latest_release | 9 |
| mean_days_between_releases | 28.7 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
58
Popularity & adoption
58Moderate
How it's scored
| 39.4/60 | Stars — 268 stars |
| 12.5/25 | Forks — 33 forks |
| 6.2/15 | Watchers — 14 watchers |
Inputs used
| forks | 33 |
| stars | 268 |
| watchers | 14 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
57Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
72
Maintainer resilience (bus factor)
39At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 6.1/22.5 | Commit distribution — top contributor authored 73% of commits |
| 13.5/13.5 | Contributor breadth — 26 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 26 |
| top_contributor_share | 0.728 |
How it's scored
| 40.7/46.8 | Issue resolution — 87% of issues closed |
| 36.3/38.3 | PR acceptance — 207/218 decided PRs merged |
| 4.5/15 | OpenSSF Scorecard: Code-Review — Found 7/20 approved changesets -- score normalized to 3 |
Inputs used
| merged_prs | 207 |
| open_issues | 8 |
| closed_issues | 54 |
| issue_closed_ratio | 0.871 |
| closed_unmerged_prs | 11 |
Ownership & stewardship
79Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 23.6/25 | Owner reach — 1,945 followers of ClickHouse |
| 25/25 | Track record — 359 public repos, account ~6 yr old |
Inputs used
| followers | 1,945 |
| owner_type | Organization |
| is_verified | — |
| owner_login | ClickHouse |
| public_repos | 359 |
| account_age_days | 2,522 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 9 days ago |
| 20/20 | Version history — 7 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/ClickHouse/clickhouse-operator |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 9 |
Engineering Quality
Are baseline engineering and documentation practices in place?
86
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 6 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://clickhouse.com |
| 10/10 | Repository description |
| 10/10 | Topics — 6 topics |
| 0/10 | Wiki |
Inputs used
| topics | clickhouse, go, kubernetes, database, helm-chart, kubernetes-operator |
| has_wiki | no |
| homepage | https://clickhouse.com |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
84
Security posture
80Good
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 2.2/7.5 | Code-Review — Found 7/20 approved changesets -- score normalized to 3 |
| 2.5/2.5 | Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 4/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
| 3.5/5 | SAST — SAST tool detected but not run on all commits |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 8 |
Excluded from scoring (no data or not applicable): branch_protection, packaging. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 153 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 153 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
86
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 89 of 89 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | AGENTS.md |
| agent_instruction_max_bytes | 8,729 |
Verify loop (build / test / typecheck)
98Excellent
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 10/10 | Demonstrated agent practice — 12 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 11 of the last 100 commits are automated dependency updates |
| 8/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0.12 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.11 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/78 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 54,136 |
| source_files_sampled | 78 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples, samples |
Inputs used
| example_dirs | examples, samples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
268GitHub stars
26contributors
193commits, last 12 months
1days since last push
7releases
1bus factor
8open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 33 ⇿
0Stars
33Forks
6Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 6
OpenSSF Scorecard 8.0 / 10
8.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 3 | Code-Review | Found 7/20 approved changesets -- score normalized to 3 |
| 10 | Contributors | project has 3 contributing companies or organizations -- score normalized to 10 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 8 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 8 |
| 7 | SAST | SAST tool detected but not run on all commits |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direct dependencies 25
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/ClickHouse/clickhouse-go/v2 | v2.47.0 | go.mod |
| Go | github.com/blang/semver/v4 | v4.0.0 | go.mod |
| Go | github.com/cert-manager/cert-manager | v1.21.0 | go.mod |
| Go | github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | go.mod |
| Go | github.com/go-logr/logr | v1.4.4 | go.mod |
| Go | github.com/go-logr/zapr | v1.3.0 | go.mod |
| Go | github.com/go-sql-driver/mysql | v1.10.0 | go.mod |
| Go | github.com/go-zookeeper/zk | v1.0.4 | go.mod |
| Go | github.com/google/go-cmp | v0.7.0 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/moby/moby/api | v1.55.0 | go.mod |
| Go | github.com/onsi/ginkgo/v2 | v2.32.0 | go.mod |
| Go | github.com/onsi/gomega | v1.42.1 | go.mod |
| Go | github.com/sethvargo/go-envconfig | v1.4.3 | go.mod |
| Go | github.com/testcontainers/testcontainers-go | v0.43.0 | go.mod |
| Go | go.uber.org/zap | v1.28.0 | go.mod |
| Go | golang.org/x/sync | v0.22.0 | go.mod |
| Go | gopkg.in/yaml.v2 | v2.4.0 | go.mod |
| Go | k8s.io/api | v0.36.3 | go.mod |
| Go | k8s.io/apiextensions-apiserver | v0.36.3 | go.mod |
| Go | k8s.io/apimachinery | v0.36.3 | go.mod |
| Go | k8s.io/client-go | v0.36.3 | go.mod |
| Go | sigs.k8s.io/controller-runtime | v0.24.1 | go.mod |
| Go | sigs.k8s.io/randfill | v1.0.0 | go.mod |
| Go | sigs.k8s.io/yaml | v1.6.0 | go.mod |
All dependencies 153
Full resolved dependency set from the GitHub dependency graph: 25 direct and 128 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/blang/semver/v4 | v4.0.0 | direct |
| Go | github.com/cert-manager/cert-manager | v1.21.0 | direct |
| Go | github.com/clickhouse/clickhouse-go/v2 | v2.47.0 | direct |
| Go | github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | direct |
| Go | github.com/go-logr/logr | v1.4.4 | direct |
| Go | github.com/go-logr/zapr | v1.3.0 | direct |
| Go | github.com/go-sql-driver/mysql | v1.10.0 | direct |
| Go | github.com/go-zookeeper/zk | v1.0.4 | direct |
| Go | github.com/google/go-cmp | v0.7.0 | direct |
| Go | github.com/google/uuid | v1.6.0 | direct |
| Go | github.com/moby/moby/api | v1.55.0 | direct |
| Go | github.com/onsi/ginkgo/v2 | v2.32.0 | direct |
| Go | github.com/onsi/gomega | v1.42.1 | direct |
| Go | github.com/sethvargo/go-envconfig | v1.4.3 | direct |
| Go | github.com/testcontainers/testcontainers-go | v0.43.0 | direct |
| Go | go.uber.org/zap | v1.28.0 | direct |
| Go | golang.org/x/sync | v0.22.0 | direct |
| Go | gopkg.in/yaml.v2 | v2.4.0 | direct |
| Go | k8s.io/api | v0.36.3 | direct |
| Go | k8s.io/apiextensions-apiserver | v0.36.3 | direct |
| Go | k8s.io/apimachinery | v0.36.3 | direct |
| Go | k8s.io/client-go | v0.36.3 | direct |
| Go | sigs.k8s.io/controller-runtime | v0.24.1 | direct |
| Go | sigs.k8s.io/randfill | v1.0.0 | direct |
| Go | sigs.k8s.io/yaml | v1.6.0 | direct |
| Go | cel.dev/expr | v0.25.2 | indirect |
| Go | dario.cat/mergo | v1.0.2 | indirect |
| Go | filippo.io/edwards25519 | v1.2.0 | indirect |
| Go | github.com/andybalholm/brotli | v1.2.2 | indirect |
| Go | github.com/antlr4-go/antlr/v4 | v4.13.1 | indirect |
| Go | github.com/azure/go-ansiterm | v0.0.0-20250102033503-faa5f7b0171c | indirect |
| Go | github.com/beorn7/perks | v1.0.1 | indirect |
| Go | github.com/cenkalti/backoff/v4 | v4.3.0 | indirect |
| Go | github.com/cenkalti/backoff/v5 | v5.0.3 | indirect |
| Go | github.com/cespare/xxhash/v2 | v2.3.0 | indirect |
| Go | github.com/clickhouse/ch-go | v0.73.0 | indirect |
| Go | github.com/containerd/errdefs | v1.0.0 | indirect |
| Go | github.com/containerd/errdefs/pkg | v0.3.0 | indirect |
| Go | github.com/containerd/log | v0.1.0 | indirect |
| Go | github.com/containerd/platforms | v0.2.1 | indirect |
| Go | github.com/cpuguy83/dockercfg | v0.3.2 | indirect |
| Go | github.com/distribution/reference | v0.6.0 | indirect |
| Go | github.com/docker/go-connections | v0.8.1 | indirect |
| Go | github.com/docker/go-units | v0.5.0 | indirect |
| Go | github.com/ebitengine/purego | v0.10.2 | indirect |
| Go | github.com/emicklei/go-restful/v3 | v3.13.0 | indirect |
| Go | github.com/evanphx/json-patch/v5 | v5.9.11 | indirect |
| Go | github.com/felixge/httpsnoop | v1.1.0 | indirect |
| Go | github.com/fsnotify/fsnotify | v1.10.1 | indirect |
| Go | github.com/fxamacker/cbor/v2 | v2.9.2 | indirect |
| Go | github.com/go-faster/city | v1.0.1 | indirect |
| Go | github.com/go-faster/errors | v0.8.0 | indirect |
| Go | github.com/go-logr/stdr | v1.2.2 | indirect |
| Go | github.com/go-ole/go-ole | v1.3.0 | indirect |
| Go | github.com/go-openapi/jsonpointer | v1.0.0 | indirect |
| Go | github.com/go-openapi/jsonreference | v1.0.0 | indirect |
| Go | github.com/go-openapi/swag | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/cmdutils | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/conv | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/fileutils | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/jsonutils | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/loading | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/mangling | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/netutils | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/pools | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/stringutils | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/typeutils | v0.28.0 | indirect |
| Go | github.com/go-openapi/swag/yamlutils | v0.28.0 | indirect |
| Go | github.com/go-task/slim-sprig/v3 | v3.0.0 | indirect |
| Go | github.com/google/cel-go | v0.30.0 | indirect |
| Go | github.com/google/gnostic-models | v0.7.1 | indirect |
| Go | github.com/google/pprof | v0.0.0-20260507013755-92041b743c96 | indirect |
| Go | github.com/grpc-ecosystem/grpc-gateway/v2 | v2.29.0 | indirect |
| Go | github.com/inconshreveable/mousetrap | v1.1.0 | indirect |
| Go | github.com/json-iterator/go | v1.1.12 | indirect |
| Go | github.com/klauspost/compress | v1.19.1 | indirect |
| Go | github.com/lufia/plan9stats | v0.0.0-20260330125221-c963978e514e | indirect |
| Go | github.com/magiconair/properties | v1.18.11 | indirect |
| Go | github.com/masterminds/semver/v3 | v3.5.0 | indirect |
| Go | github.com/microsoft/go-winio | v0.6.2 | indirect |
| Go | github.com/moby/docker-image-spec | v1.3.1 | indirect |
| Go | github.com/moby/go-archive | v0.2.1 | indirect |
| Go | github.com/moby/moby/client | v0.5.1 | indirect |
| Go | github.com/moby/patternmatcher | v0.6.1 | indirect |
| Go | github.com/moby/spdystream | v0.5.1 | indirect |
| Go | github.com/moby/sys/sequential | v0.7.0 | indirect |
| Go | github.com/moby/sys/user | v0.4.1 | indirect |
| Go | github.com/moby/sys/userns | v0.1.0 | indirect |
| Go | github.com/moby/term | v0.5.2 | indirect |
| Go | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | indirect |
| Go | github.com/modern-go/reflect2 | v1.0.3-0.20250322232337-35a7c28c31ee | indirect |
| Go | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | indirect |
| Go | github.com/opencontainers/go-digest | v1.0.0 | indirect |
| Go | github.com/opencontainers/image-spec | v1.1.1 | indirect |
| Go | github.com/paulmach/orb | v0.13.0 | indirect |
| Go | github.com/pierrec/lz4/v4 | v4.1.27 | indirect |
| Go | github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | indirect |
| Go | github.com/power-devops/perfstat | v0.0.0-20240221224432-82ca36839d55 | indirect |
| Go | github.com/prometheus/client_golang | v1.24.1 | indirect |
| Go | github.com/prometheus/client_model | v0.6.2 | indirect |
| Go | github.com/prometheus/common | v0.70.1 | indirect |
| Go | github.com/prometheus/procfs | v0.21.1 | indirect |
| Go | github.com/segmentio/asm | v1.2.1 | indirect |
| Go | github.com/shirou/gopsutil/v4 | v4.26.6 | indirect |
| Go | github.com/shopspring/decimal | v1.4.0 | indirect |
| Go | github.com/sirupsen/logrus | v1.9.4 | indirect |
| Go | github.com/spf13/cobra | v1.10.2 | indirect |
| Go | github.com/spf13/pflag | v1.0.10 | indirect |
| Go | github.com/stretchr/testify | v1.11.1 | indirect |
| Go | github.com/tklauser/go-sysconf | v0.4.0 | indirect |
| Go | github.com/tklauser/numcpus | v0.12.0 | indirect |
| Go | github.com/x448/float16 | v0.8.4 | indirect |
| Go | github.com/yusufpapurcu/wmi | v1.2.4 | indirect |
| Go | go.opentelemetry.io/auto/sdk | v1.2.1 | indirect |
| Go | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.69.0 | indirect |
| Go | go.opentelemetry.io/otel | v1.44.0 | indirect |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | indirect |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | indirect |
| Go | go.opentelemetry.io/otel/metric | v1.44.0 | indirect |
| Go | go.opentelemetry.io/otel/sdk | v1.44.0 | indirect |
| Go | go.opentelemetry.io/otel/trace | v1.44.0 | indirect |
| Go | go.opentelemetry.io/proto/otlp | v1.11.0 | indirect |
| Go | go.uber.org/multierr | v1.11.0 | indirect |
| Go | go.yaml.in/yaml/v2 | v2.4.4 | indirect |
| Go | go.yaml.in/yaml/v3 | v3.0.5 | indirect |
| Go | golang.org/x/crypto | v0.54.0 | indirect |
| Go | golang.org/x/exp | v0.0.0-20260508232706-74f9aab9d74a | indirect |
| Go | golang.org/x/mod | v0.38.0 | indirect |
| Go | golang.org/x/net | v0.57.0 | indirect |
| Go | golang.org/x/oauth2 | v0.36.0 | indirect |
| Go | golang.org/x/sys | v0.47.0 | indirect |
| Go | golang.org/x/term | v0.45.0 | indirect |
| Go | golang.org/x/text | v0.40.0 | indirect |
| Go | golang.org/x/time | v0.15.0 | indirect |
| Go | golang.org/x/tools | v0.48.0 | indirect |
| Go | gomodules.xyz/jsonpatch/v2 | v2.5.0 | indirect |
| Go | google.golang.org/genproto/googleapis/api | v0.0.0-20260720211330-0afa2a65878a | indirect |
| Go | google.golang.org/genproto/googleapis/rpc | v0.0.0-20260720211330-0afa2a65878a | indirect |
| Go | google.golang.org/grpc | v1.82.1 | indirect |
| Go | google.golang.org/protobuf | v1.36.12-0.20260120151049-f2248ac996af | indirect |
| Go | gopkg.in/evanphx/json-patch.v4 | v4.13.0 | indirect |
| Go | gopkg.in/inf.v0 | v0.9.1 | indirect |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirect |
| Go | k8s.io/apiserver | v0.36.3 | indirect |
| Go | k8s.io/component-base | v0.36.3 | indirect |
| Go | k8s.io/klog/v2 | v2.140.0 | indirect |
| Go | k8s.io/kube-openapi | v0.0.0-20260512234627-ef417d054102 | indirect |
| Go | k8s.io/streaming | v0.36.3 | indirect |
| Go | k8s.io/utils | v0.0.0-20260626114624-be93311217bd | indirect |
| Go | sigs.k8s.io/apiserver-network-proxy/konnectivity-client | v0.36.0 | indirect |
| Go | sigs.k8s.io/gateway-api | v1.6.1 | indirect |
| Go | sigs.k8s.io/json | v0.0.0-20250730193827-2d320260d730 | indirect |
| Go | sigs.k8s.io/structured-merge-diff/v6 | v6.4.2 | indirect |
Dependency advisories 1
This repository publishes no package the index resolves, so its own dependency graph was assessed — 153 packages, which also include development and test pins that never ship: 1 carry known advisories, of which 0 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| golang.org/x/crypto | v0.54.0 | indirect | unknown | 1 | — |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"clickhouse",
"go",
"kubernetes",
"database",
"helm-chart",
"kubernetes-operator"
],
"is_fork": false,
"size_kb": 2134,
"has_wiki": false,
"homepage": "https://clickhouse.com",
"languages": {
"Go": 706232,
"Shell": 4443,
"Python": 2619,
"Makefile": 30740,
"Starlark": 2661,
"Dockerfile": 2759,
"Go Template": 10449
},
"pushed_at": "2026-07-28T15:46:32Z",
"created_at": "2025-04-17T18:00:07Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T15:49:50Z",
"description": "Official Kubernetes Operator for ClickHouse®",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://clickhouse.com",
"name": "ClickHouse",
"type": "Organization",
"login": "ClickHouse",
"company": null,
"location": "United States of America",
"followers": 1945,
"avatar_url": "https://avatars.githubusercontent.com/u/54801242?v=4",
"created_at": "2019-09-02T10:22:35Z",
"is_verified": null,
"public_repos": 359,
"account_age_days": 2522
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.0.7",
"kind": "patch",
"published_at": "2026-07-20T17:10:35Z"
},
{
"tag": "v0.0.6",
"kind": "patch",
"published_at": "2026-06-19T15:18:30Z"
},
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2026-05-18T10:31:39Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2026-04-17T17:03:40Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2026-03-11T13:35:15Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2026-02-16T23:18:28Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2026-01-29T12:16:46Z"
}
],
"recent_commits": [
{
"oid": "406a508708ec26a8f4f62e4cd9c90994beace5c5",
"body": "…s group (#281)\n\nci: bump docker/login-action in the github-actions group\n\nBumps the github-actions group with 1 update: [docker/login-action](https://github.com/docker/login-action).\n\n\nUpdates `docker/login-action` from 4.4.0 to 4.5.2\n- [Release notes](https://github.com/docker/login-action/release\n[…]\nsion-update:semver-minor\n dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump docker/login-action from 4.4.0 to 4.5.2 in the github-action…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T15:46:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aee1c5b0b54741cc85bd703e65e4930e5a8afc20",
"body": "Bumps the go-modules group with 31 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.36.3` |\n| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.2` | `0.36.3` |\n| [k8s.io/apimachinery]\n[…]\n version-update:semver-patch\n dependency-group: go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chores: bump the go-modules group with 31 updates (#282)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T15:34:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5652114445279830d5d2e59adc0143f196c4fbc1",
"body": "…between jobs (#280)",
"is_bot": false,
"headline": "test: add e2e sharding planning step to equally distribute test spec …",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-27T18:09:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "630f706c2d70b0c660f3eb1e82cc7064dbf2aaee",
"body": null,
"is_bot": false,
"headline": "test: retain e2e failure diagnostics and reports (#279)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-27T16:10:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9171d9f8806662c7f971ee6ff5a7185be0e26026",
"body": null,
"is_bot": false,
"headline": "fix: probe job oom kill with transparent_hugepage=true (#278)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-24T18:49:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ada05d8cdaf6dedb0abafa8320feb2aa4fddef6",
"body": "…… (#277)\n\ntest: update ch version in tests, multiple changes for e2e stabilization and CI perf",
"is_bot": false,
"headline": "test: update ch version in tests, multiple changes for e2e stabilizat…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-22T15:32:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a583a6fd76ce6d103d8836c93147a19242ec0998",
"body": "* chores: refactor replica state\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "chores: refactor replica state (#276)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-22T12:40:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b36e1c7628cfda297629846165176449415b2bd5",
"body": null,
"is_bot": false,
"headline": "fix: wrong defaulting of setting enableDatabaseSync to false (#275)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-21T17:12:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6df28c14e4f6038e8cd275f42d9f23ca236aa1b",
"body": "Bumps the go-modules group with 18 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |\n| [github.com/sethvargo/go-envconfig](https://github.com/sethvargo/go-envconfig) | `1.3.1` | `1.4.3` |\n| [github.com/ebitengine/\n[…]\n version-update:semver-patch\n dependency-group: go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chores: bump the go-modules group with 18 updates (#274)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T15:15:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8941402fe2b48e0292e438a9781ab68b7ca29112",
"body": "Bumps the github-actions group with 1 update: [actions/setup-go](https://github.com/actions/setup-go).\n\n\nUpdates `actions/setup-go` from 6 to 7\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v6...v7)\n\n---\nupdated-dependencies:\n\n[…]\nsion-update:semver-major\n dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/setup-go from 6 to 7 in the github-actions group (#273)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T15:02:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "24da2d81a832c524ff7898dc8d04baa1ff63f49a",
"body": "* docs: clarify topologyZoneKey and nodeHostnameKey semantics\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>\n\n* docs: add maxSkew to Vale vocabulary\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: clarify topologyZoneKey and nodeHostnameKey semantics (#271)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-20T14:10:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9ad3958340b7aa54686cdf671739d03748e72c35",
"body": null,
"is_bot": false,
"headline": "fix: use resourceName helper for webhook-server-cert secret name (#270)",
"author_name": "Sebastian S.",
"author_login": "applike-ss",
"committed_at": "2026-07-20T13:35:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91c5a3ca45532e62bb05d0ae99d64e1514f2dc32",
"body": null,
"is_bot": false,
"headline": "docs: document Kubernetes events emitted by the operator (#252)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-07-20T13:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6dec3b64511a4569be529ad26dc7f50eaa22b221",
"body": null,
"is_bot": false,
"headline": "feat: support encrypted storage policy generation (#269)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-20T11:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9abcb0f74310f46081d99bcf9a53932f05e0f4f6",
"body": null,
"is_bot": false,
"headline": "fix: hide secrets from preprocessed config (#267)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-16T15:42:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c488509cdd663f15b24665e4e8e64e310a3842c2",
"body": "… (#264)\n\nBumps [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) from 0.21.6 to 1.0.0.\n- [Release notes](https://github.com/go-openapi/jsonreference/releases)\n- [Commits](https://github.com/go-openapi/jsonreference/compare/v0.21.6...v1.0.0)\n\n---\nupdated-dependencies\n[…]\ny-type: indirect\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chores: bump github.com/go-openapi/jsonreference from 0.21.6 to 1.0.0…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T15:27:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d3674a146b8bda72f332714ee4c00c5adda74358",
"body": "Bumps the go-modules group with 15 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.20.3` | `1.21.0` |\n| [github.com/sethvargo/go-envconfig](https://github.com/sethvargo/go-envconfig) | `1.3.0` | `1.3.1`\n[…]\n version-update:semver-patch\n dependency-group: go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chores: bump the go-modules group with 15 updates (#263)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T15:18:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "637039c5bc7f538d0825af0574de10fec8ab9bd6",
"body": "Liveness now probes /ping on the interserver port, which opens before\ntable loading: a slow synchronous load (async_load_databases=false,\nlarge table count) no longer gets the container killed after ~110s.\n\nReadiness moves to /ping on a new always-on management-http composable\nprotocol (9002), which\n[…]\ncould take down the last serving replica. Reload is\nattempted only after a successful probe, and ReloadError now maps to\nStageNotReadyUpToDate.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: default probe ports and probe-failure rollout gating (#262)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-14T13:26:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3983ec8b0f346d0ad21699cef1cb3e434c5a3d40",
"body": "…ly (#260)\n\nThe observed cluster version was picked with a plain string comparison,\nso across a digit-count boundary (e.g. 25.9 -> 25.10) the older version\nwon and Status.Version and the VersionInSync condition reported the\nalready-upgraded replicas as out of sync.\n\nReuse upgrade.ParseBareVersion/CompareVersions to pick the newest\nreported version, falling back to the previous behavior if a version\ndoes not parse.",
"is_bot": false,
"headline": "fix: compare Keeper replica versions numerically, not lexicographical…",
"author_name": "Nahuel",
"author_login": "nahuel11500",
"committed_at": "2026-07-13T13:09:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90adcfabcded32645b76bd33a9c0548220c97ae5",
"body": "Bumps the go-modules group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.28.1` | `0.29.1` |\n| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.7` | `1.19.0` |\n| [github.com/shirou/gopsuti\n[…]\n version-update:semver-patch\n dependency-group: go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chores: bump the go-modules group with 5 updates (#259)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-07T15:05:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ecd97d2a9c18a66475abf9840949290101c15a32",
"body": null,
"is_bot": false,
"headline": "fix: reduce probe job memory footprint (#257)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-07-06T21:23:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9ad252de6a0ac7c7875bbac2417a00b0d864b0f",
"body": "… conversion (#255)\n\n* fix(clickhouse): don't drop a non-empty default database during Replicated conversion\n\nensureReplicaDefaultDatabaseEngine converts the `default` database from\nAtomic to Replicated when enableDatabaseSync is on. When `default` already\nexisted as a non-Replicated engine *and con\n[…]\nhiding it. The database is still left intact (never dropped).\n\nUpdate the integration test to assert EnsureDefaultDatabaseEngine reports\nfailure while the seeded table and Atomic engine are preserved.",
"is_bot": false,
"headline": "fix: don't drop a non-empty Atomic default database during Replicated…",
"author_name": "Warren Lee",
"author_login": "wrn14897",
"committed_at": "2026-06-30T19:01:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ecd71949243d71f37a717d21acbba20424af03a1",
"body": "Bumps the go-modules group with 22 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.46.0` | `2.47.0` |\n| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.20.2` |\n[…]\n version-update:semver-minor\n dependency-group: go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chores: bump the go-modules group with 22 updates (#253)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-30T14:24:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a8bc2a9786df3a7349a1772089174e887848c91",
"body": "* docs: add network policies guide\n\n* docs: add network policies guide\n\n* docs: tighten network policies guide\n\nRemove the roadmap reference that conflated the operator's static ingress\nNetworkPolicies with the separate per-cluster managed-policy feature, and\ndrop chart-internal details (template re\n[…]\nlicy paths).\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: operator network policies (#246)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-25T15:10:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3f59f62eb51dc2f1c4fc3c362fe5f78ed3ce12f4",
"body": "Bumps the go-modules group with 50 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.54.2` | `1.55.0` |\n| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.31.0` | `2.32.0` |\n| [github.com/onsi/gomega](https://github.\n[…]\n version-update:semver-minor\n dependency-group: go-modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chores: bump the go-modules group with 50 updates (#251)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-25T11:37:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b85c68aeb67cc0708ad1ed9ae946512e1331adb3",
"body": "Bumps the github-actions group with 3 updates: [errata-ai/vale-action](https://github.com/errata-ai/vale-action), [dcarbone/install-jq-action](https://github.com/dcarbone/install-jq-action) and [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action).\n[…]\nsion-update:semver-patch\n dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump the github-actions group with 3 updates (#250)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-25T11:36:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e7e5ed7fb328daebbd089b108bb473fe59555185",
"body": "Complements the security updates already enabled on the repo with scheduled\nversion updates, including indirect Go modules (allow: dependency-type: all).\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add Dependabot config for scheduled version updates (#249)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-25T11:11:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1fc5ec2823f57639b4dbe4dfc75db8e7f853f85d",
"body": "* Fix markdown parsing error\n\n* run generators\n\n---------\n\nCo-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>",
"is_bot": false,
"headline": "docs: fix markdown parsing error (#247)",
"author_name": "Shaun Struwig",
"author_login": "Blargian",
"committed_at": "2026-06-24T13:10:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f292b7cfdd78774571bd421d243385a1c4eabbd",
"body": "* docs: add storage and volumes guide\n\n* docs: add storage and volumes guide\n\n* docs: drop internal storage details from the storage guide\n\nA behaviour guide should not pin internal details that can change\nwithout notice: the rendered storage_configuration block (the `main`\nvolume name is a template\n[…]\nd 10-storage-jbod.yaml\nfilename, and the verbatim webhook warning string. Keep the prose that\ndescribes the actual behaviour.\n\n---------\n\nCo-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>",
"is_bot": false,
"headline": "docs: extract storage related documentation as a dedicated guide (#243)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-23T13:34:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8ecdad991a69c223999082038042eaf6f13ee015",
"body": "…onciles (#245)",
"is_bot": false,
"headline": "chores: reduce amount of reconciles, cache CH connections between rec…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-23T11:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4041e939c62a16c70fc680a9e2c11bdb13917af9",
"body": null,
"is_bot": false,
"headline": "ci: fix changelog categories generation (#242)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-19T16:11:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15cdb3544e6261228267e7440ea2e7dff74284d5",
"body": "opm v1.72.0 (bumped from v1.68.0 in #240) ships a newer containers/image\nthat dropped v1->v2 auto-conversion of registries.conf and hard-errors on\nthe ubuntu-latest runner's v1-format /etc/containers/registries.conf,\nbreaking `opm alpha render-template` in the catalog build.\n\nPoint CONTAINERS_REGISTRIES_CONF at /dev/null so the lib uses built-in\ndefaults; fully-qualified ghcr.io bundle pulls need no registries config.\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: bypass v1 registries.conf in opm catalog render (#241)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-19T14:29:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "52976c0c3964e7e7b4dfe529b1542594afbfbe43",
"body": "…art with latest kubebuilder (#240)",
"is_bot": false,
"headline": "chores: update dependencies, actions, linter config, generate helm ch…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-19T13:31:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e37ed914bdb2503feaabfab517342bf1d596f72f",
"body": null,
"is_bot": false,
"headline": "docs: expand default user password configuration (#238)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-19T13:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3b0d67afb50e70a4672c4456663efd24917d8d3",
"body": null,
"is_bot": false,
"headline": "ci: fix paths-filter so docs-only changes actually skip CI (#239)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-19T12:09:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e77b9a6e274e3870ad4c7cc16f508a976a94a15c",
"body": "…icit setting (#237)",
"is_bot": false,
"headline": "feat: do not set caBundle from certificate by default, only with expl…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-19T12:02:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e96f8ec58aadd24d0e13be7453ccccf7a7c3e53",
"body": "…rsion probe job (#195)",
"is_bot": false,
"headline": "feat: support distroless images in ch version probe, remove keeper ve…",
"author_name": "ashishch432",
"author_login": "ashishch432",
"committed_at": "2026-06-17T16:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10a6f02d0768988ffc87996a9a0056b1e2999b3f",
"body": null,
"is_bot": false,
"headline": "test: use latest supported ClickHouse versions in tests (#234)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-17T11:37:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d0d4a650b45c3e3fbfcf03d8f801e6f166fc26d",
"body": null,
"is_bot": false,
"headline": "feat: add JBOD additional PVC support for ClickHouse replicas (#136)",
"author_name": "matanper",
"author_login": "matanper",
"committed_at": "2026-06-17T10:43:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5ec30bab31e0da1ff56059322512e1caf2a39a4",
"body": null,
"is_bot": false,
"headline": "test: fix flaky operator-upgrade keeper writes (#233)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-16T15:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "124b58850bd802d8060f31c14e81baa35c3ea021",
"body": "… fit client-side apply (#232)",
"is_bot": false,
"headline": "feat: add crds as a separate release artifact, build stripped crds to…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-16T15:19:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "024dd86f9ad20fcd91a18f821a4510d70f37d987",
"body": null,
"is_bot": false,
"headline": "docs: document spec.clusterDomain in configuration guide (#228)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-16T13:15:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f55fbb7abd8ae71f19b72d1b4c2f7f4436b4206b",
"body": "…s (#231)",
"is_bot": false,
"headline": "docs: update AGENTS.md, do not run tests on pure documentation change…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-16T13:09:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27b92d4ad8e16ac7edd1177260243b04acf3e8ff",
"body": null,
"is_bot": false,
"headline": "test: add upgrade tests to verify operator forward compatibility (#229)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-16T13:06:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f20f9d8fd8eb683092658d7de14df7aa5ccc39dd",
"body": "…ocs and comments (#230)",
"is_bot": false,
"headline": "docs: fix docs links and CI, fetch mintlify changes, actualize some d…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-16T12:42:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8381d0c9b25a9add3f56f0f8b6c1011569a1c3f3",
"body": null,
"is_bot": false,
"headline": "feat: add registry option to helm charts (#227)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-15T17:12:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e90a6a59afda0c47ffcbe3503ad292e8f9dda123",
"body": null,
"is_bot": false,
"headline": "docs: tls configuration (#223)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-15T15:07:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be118d99698ced3f0f7e184eb9e3d9a72419f71b",
"body": null,
"is_bot": false,
"headline": "feat: warnings as a kubernetes events (#209)",
"author_name": "Konstantin Vedernikov",
"author_login": "scanhex12",
"committed_at": "2026-06-15T13:11:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6346a75c9dc2676cba6f6407155a958f2b6717f2",
"body": null,
"is_bot": false,
"headline": "feat: add prometheus port to the keeper headless service (#226)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-15T13:10:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5d7604f41ba2094bf5326ede72fcb0e5ccde5f9",
"body": null,
"is_bot": false,
"headline": "docs: scaling guide (#222)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-11T12:14:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e19eb52b09b13b82d2937dc4ac2c4e6335c3fd3",
"body": "Adds an OpenShift compatibility smoke test driven from a self-hosted\nrunner that hosts a long-lived OKD single-node cluster. The test\nsubscribes to the fast-v0 channel of the operator's OLM catalog, waits\nfor the CSV to succeed, then drives a Keeper + ClickHouse deployment\nin a dedicated test namesp\n[…]\n + reinstalls the\n long-lived cluster so kubelet certs and OS state stay fresh.\n\nRunner image + cleanup/rebuild scripts live in a separate repo\n(github.com/ClickHouse/clickhouse-operator-olm-runner).",
"is_bot": false,
"headline": "test: add openshift e2e smoke test (#202)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-10T20:47:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30368f9efbd3c436b1ba7b01c373cc5673d3c62b",
"body": null,
"is_bot": false,
"headline": "fix: paginate all tags to build olm catalog (#221)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-09T21:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73d49388a59dfecad2211071794c79998ef8647e",
"body": null,
"is_bot": false,
"headline": "docs: document spec.settings.logger server logging configuration (#220)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-09T11:32:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a718cc9607ef4345c2bdc4e9872276a9311976f2",
"body": null,
"is_bot": false,
"headline": "fix: track users reload separetely of server config (#218)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-08T18:54:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a5295246033e3967135b463fa304bdba5548596",
"body": null,
"is_bot": false,
"headline": "docs: document Pod disruption budget configuration (#213)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-08T14:43:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bd8467761c6175a53a995d7c09a3570d4146e85",
"body": null,
"is_bot": false,
"headline": "docs: document upgradeChannel and version probe (#216)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-03T21:06:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6137a41c258eac0cb43974ce2ef1f412fa7ad53b",
"body": null,
"is_bot": false,
"headline": "build: publish per-commit bundle + catalog on 'fast' channel (#211)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-02T18:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98dd1c4ce241be45d696780f8f7cc3ffaa3a9f92",
"body": null,
"is_bot": false,
"headline": "test: fix docs linting CI jobs (#212)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-02T18:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a0e06bb26e51a8d7a4493132995140906d54f77",
"body": "…n default (#206)",
"is_bot": false,
"headline": "fix: override resources as whole, use the same req/limit for memory i…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-06-02T15:10:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fbd0194a4b9501133ff7e2122f91f9a08acf1e2",
"body": "Adds a new top-level section in configuration.mdx covering\nspec.additionalPorts (introduced in #197), placed between External\nSecret and ClickHouse settings. The section explains:\n\n- Which ports the operator already binds and why additionalPorts exists\n- The gotcha that additionalPorts only opens th\n[…]\n of reserved ports and reserved names enforced by\n the validating webhook (#205), with sample error messages so users\n can recognise a rejected request\n\nNo code or chart changes. documentation only.",
"is_bot": false,
"headline": "docs: document spec.additionalPorts and reserved-port validation (#210)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-02T14:15:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18f10ea950d2160775bbc28f7f676062ebd4e29e",
"body": "…#208)",
"is_bot": false,
"headline": "feat(keeper): smart-default maxUnavailable=1 for single-replica PDB (…",
"author_name": "Zeynel",
"author_login": "ZeynelKoca",
"committed_at": "2026-06-02T13:15:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ed59f8d513f2f7a2c8046c475e119aff088a899",
"body": "Surface the ExternalSecretValid status condition as a kubectl print\ncolumn on ClickHouseCluster. The column has priority=1 so it only\nappears under , keeping the default output\nunchanged.\n\nFor clusters that do not use spec.externalSecret, the condition is\nabsent and the column renders as empty. For clusters that do, users\ncan spot ExternalSecretNotFound or ExternalSecretInvalid without\nrunning kubectl describe.",
"is_bot": false,
"headline": "feat: add ExternalSecret print column to ClickHouseCluster (#207)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-06-02T12:51:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "598d9efbe469d54b5fe9abc4325265daad22aff4",
"body": null,
"is_bot": false,
"headline": "docs: external secret config (#203)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-05-29T18:36:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe88e8f079dc407fec60481690d1f754cec5794e",
"body": "… (#205)",
"is_bot": false,
"headline": "feat: reject additionalPorts that collide with operator-managed ports…",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-05-29T17:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2f800dbc84b789409daccb42c25e30ef900f075",
"body": null,
"is_bot": false,
"headline": "fix: strip owned resources names to fit in limits (#204)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-28T19:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42552095c3a5f40b9f7f6445cce0afa7e33b7dfe",
"body": null,
"is_bot": false,
"headline": "test: automatic e2e tests split between parallel jobs (#200)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-28T12:27:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dad5684724ee7b1245d03f0a56416915650423ee",
"body": "The Mintlify site mounts these ClickHouse docs under `/core/`, so bare\n`/concepts/...`, `/reference/...` paths from the guides resolved to\nbroken links once synced. Updates the five affected references in\nguides/configuration.mdx and guides/introduction.mdx so the next sync\nships them correctly.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: prefix internal ClickHouse doc links with /core (#201)",
"author_name": "Shaun Struwig",
"author_login": "Blargian",
"committed_at": "2026-05-27T18:52:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6385330c2671560226f41f5644c16a310993815e",
"body": "Co-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: add monitoring & observability guide (#198)",
"author_name": "Arek Borucki",
"author_login": "arekborucki",
"committed_at": "2026-05-27T18:50:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7e82242af1ef32ec951ad5c6c88ff64b0e5299eb",
"body": "…(#197)\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: allow exposing additional ports on ClickHouse service and pods …",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-27T16:59:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4892a6816ec3cefcb5c23ab44101f61e4747fab3",
"body": "…nters issues (#194)",
"is_bot": false,
"headline": "chore: bump dependencies, enable clickhouse client linter, fix new li…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-26T13:37:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "963ff9a9e109f8ed31fbaa0481ac45cb865b08bc",
"body": "Co-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>",
"is_bot": false,
"headline": "feat: apply reload-safe config changes without restart",
"author_name": "Konstantin Vedernikov",
"author_login": "scanhex12",
"committed_at": "2026-05-22T15:44:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b090fd84d62f0dfe1782c5c7623600a0b2bfdb6b",
"body": "docs: add Mintlify frontmatter to docs pages\n\nRestores YAML frontmatter (slug, title, keywords, description, doc_type,\nposition/sidebarTitle) on docs pages so the Mintlify sync workflow\npreserves it instead of repeatedly trying to remove it on each sync.\n\nAlso updates the autogen API reference template (gv_list.tpl) to emit\nthe same frontmatter shape, so regenerated api-reference.mdx stays\nconsistent.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add Mintlify frontmatter to docs pages (#192)",
"author_name": "Shaun Struwig",
"author_login": "Blargian",
"committed_at": "2026-05-21T19:40:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "14b8f47395cafc4706fad45de02ccdbf058ec86b",
"body": "feat(community): Create PR to community-operators\n\nSigned-off-by: Julio Jimenez <julio@julioj.com>",
"is_bot": false,
"headline": "feat(release): Create PR to community-operators after release (#190)",
"author_name": "Julio Jimenez",
"author_login": "juliojimenez",
"committed_at": "2026-05-18T16:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "491f9b3b3a39cff85c9afc0e5e645ed17dec77a8",
"body": null,
"is_bot": false,
"headline": "fix: requeue reconcillation after replica update (#189)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-15T21:15:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe80214c124226a4354c185e5f8bc7ad4e641d70",
"body": "…ttings in OpenShift installations (#184)",
"is_bot": false,
"headline": "feat: drop all capabilities by default, remove restricted security se…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-15T19:17:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0021000d8369d222ae2134adf1aaa04fc45b4983",
"body": "Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Docs: restructure for Mintlify sync workflow (#187)",
"author_name": "Shaun Struwig",
"author_login": "Blargian",
"committed_at": "2026-05-15T17:07:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ebddd1f5b0a88c97c01c63aa1c1d64271b1169b0",
"body": "…ator can't connect server (#186)",
"is_bot": false,
"headline": "fix: set Healthy/Ready to Unknown if pods are running, but can't oper…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-12T13:34:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c79132ef06cc2750abbe196172df161a31d57de4",
"body": "…estricted (#176)\n\n* fix: respect user-provided container capabilities under PodSecurity restricted\n\nStrategic merge patch on corev1.Capabilities deep-merges Add and Drop independently,\nso a user setting only `drop: [ALL]` leaves the operator-defaulted\n`add: [IPC_LOCK, PERFMON, SYS_PTRACE]` in place\n[…]\ntronger\n guarantee than the narrow Capabilities clear they were targeting\n\n* execute generators, simplify container override\n\n---------\n\nCo-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>",
"is_bot": false,
"headline": "fix: respect user-provided container capabilities under PodSecurity r…",
"author_name": "Stefan Wang",
"author_login": "1fanwang",
"committed_at": "2026-05-12T13:13:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6c1993c3303349b85780b67aac9b729754d3cc3d",
"body": null,
"is_bot": false,
"headline": "feat: correctly handle ipv4-only envs (#185)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-12T09:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd52ed2ef0e28c97867f74cb2410796292ad8743",
"body": null,
"is_bot": false,
"headline": "feat: add clickhouse-cluster helm chart (#183)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-05-11T16:56:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f08fa9e14b0232bcc6597bde35d0cd0a2ff5212a",
"body": "* [Helm] - Regenerate helm chart with latest kubebuilder\n\n* rescaffold manifests and helm chart, remove cert-manager subchart\n\n---------\n\nCo-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>",
"is_bot": false,
"headline": "feat(helm): Regenerate helm chart with latest kubebuilder (#159)",
"author_name": "Alex",
"author_login": "Allex1",
"committed_at": "2026-05-08T14:53:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "762d0585b7ea96425052341408410bb0415666cc",
"body": null,
"is_bot": false,
"headline": "feat: support keeper on a different namespace (#173)",
"author_name": "Ertan Deniz",
"author_login": "ertanden",
"committed_at": "2026-04-30T01:47:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cee6692e78fba227618f7a4c0d42ad2c4c73362b",
"body": "…175)",
"is_bot": false,
"headline": "fix: cache version probe result to prevent reconciliation deadlock (#…",
"author_name": "ashishch432",
"author_login": "ashishch432",
"committed_at": "2026-04-28T08:22:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df6ed8e1cb644d3c79d5b7db236fb38b42482a8f",
"body": null,
"is_bot": false,
"headline": "test: support suppressing crd-comptat-check (#177)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-28T07:46:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc3c7d8df5ed09a50dc6014289f3f8c63cad9a66",
"body": "…splay proper values. (#167)",
"is_bot": false,
"headline": "feat: enable metric log tables by default so the builtin dashboard di…",
"author_name": "ivangonv",
"author_login": "ivangonv",
"committed_at": "2026-04-27T06:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "273e1644bd00543716fc613e6fbcbfa1e5735232",
"body": null,
"is_bot": false,
"headline": "feat: support externally managed secret (#168)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-17T16:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8f622b4dcb5984a04bdf6251b9f4b1acf695269",
"body": null,
"is_bot": false,
"headline": "chores: update dependencies (#166)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-16T18:31:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9eeb08eef6e58ad75ce0558c9455a4d47d60894",
"body": "* squash: named_collections_encryption_key\n\nSquashed commits:\nf06d079 Konstantin Vedernikov - start\ne0f2b48 Konstantin Vedernikov - fix review\ne79beac Konstantin Vedernikov - fix\n0761dbe Konstantin Vedernikov - fix test\n0ebfa59 Konstantin Vedernikov - replace image tag with version\n61b7129 Konstanti\n[…]\n fix review\na2b4c8e scanhex12 - better\n42ed945 scanhex12 - fix review\n\n* Cleanup and fix issues\n\n* wait for version probe job\n\n---------\n\nCo-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>",
"is_bot": false,
"headline": "feat: named collections in keeper with key encryption (#111)",
"author_name": "Konstantin Vedernikov",
"author_login": "scanhex12",
"committed_at": "2026-04-16T15:47:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4e22bee037855a43b3a13a19ca8a56bfbda4027",
"body": "…s only with manifests installation (#165)",
"is_bot": false,
"headline": "test: pre pull clickhouse images in e2e test, test campatible version…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-16T13:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97ddba1f16c48bc559521c9c78fd866047431f81",
"body": null,
"is_bot": false,
"headline": "feat: allow to disable PDB management (#164)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-15T14:59:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c595921c468f1f81c76ed99f023adf97a2de92d4",
"body": "…error (#163)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chores: refactor reconcillation pipeline supporting blocking without …",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-15T12:26:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "94038b3bd845e153a68f184de7a96cfef601b250",
"body": null,
"is_bot": false,
"headline": "chores: split reconcilerBase on more specialized helpers (#162)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-14T18:03:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "614f84efd678aae123fb6902f0fdd7dff39881cd",
"body": "Co-authored-by: Pervakov Grigorii <pervakov.grigory@gmail.com>",
"is_bot": false,
"headline": "feat: add version probe job overrides (#153)",
"author_name": "ashishch432",
"author_login": "ashishch432",
"committed_at": "2026-04-13T15:57:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d73a53212c5f48a592401e516e7ad9806b8cd353",
"body": null,
"is_bot": false,
"headline": "build: version local dependencies in Makefile (#160)",
"author_name": "ashishch432",
"author_login": "ashishch432",
"committed_at": "2026-04-13T15:28:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "442f66d4a89b0f66990b5bda4f7dca2a1ebe3635",
"body": null,
"is_bot": false,
"headline": "chores: add AGENTS.md (#158)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-09T18:15:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63d0edcf432644f3bb1eecd0ff824ee4be4b37b0",
"body": null,
"is_bot": false,
"headline": "ci: package and push helm chart in release-main workflow (#154)",
"author_name": "ashishch432",
"author_login": "ashishch432",
"committed_at": "2026-04-09T15:50:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9be2a5d0edfbebf78bc15cd0763e656843f113a4",
"body": null,
"is_bot": false,
"headline": "chore: add CI runner disk space cleanup, fix flaky tests (#157)",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-09T15:20:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1595608a2386f63151fa89eeadb1d8b39faf5a0",
"body": "…separate file (#156)",
"is_bot": false,
"headline": "chores: unify extra config behaviour, mount keeper extra config as a …",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-09T11:48:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5c05770300e57e423191bf736fb826f8dcde5c2",
"body": "Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.42.0 to 1.43.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](https://\n[…]\ndk\n dependency-version: 1.43.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 (#155)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-09T10:30:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d33b34fbb797f42cdbda0b720b0fbdefc8a9e16c",
"body": "… significant changes (#152)",
"is_bot": false,
"headline": "feat: add default resource for version probe job, recreate it only on…",
"author_name": "Pervakov Grigorii",
"author_login": "GrigoryPervakov",
"committed_at": "2026-04-08T12:33:13Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 7,
"commits_last_year": 193,
"latest_release_at": "2026-07-20T17:10:35Z",
"latest_release_tag": "v0.0.7",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 41,
"days_since_latest_release": 9,
"mean_days_between_releases": 28.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/ClickHouse/clickhouse-operator",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/ClickHouse/clickhouse-operator",
"is_deprecated": false,
"latest_version": "v0.0.7",
"repository_url": "https://github.com/ClickHouse/clickhouse-operator",
"versions_count": 7,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T14:10:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 33,
"stars": 268,
"watchers": 14,
"fork_history": {
"days": [
{
"date": "2026-01-29",
"count": 2
},
{
"date": "2026-01-30",
"count": 2
},
{
"date": "2026-02-02",
"count": 1
},
{
"date": "2026-02-09",
"count": 2
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-17",
"count": 2
},
{
"date": "2026-02-20",
"count": 1
},
{
"date": "2026-02-22",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-02-25",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-03-16",
"count": 1
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-03-25",
"count": 1
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-22",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
},
{
"date": "2026-06-26",
"count": 1
},
{
"date": "2026-07-08",
"count": 2
},
{
"date": "2026-07-13",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
}
],
"complete": true,
"collected": 33,
"total_forks": 33
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples",
"samples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 54136,
"source_files_sampled": 78,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 8729
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 22
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 153,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/ClickHouse/clickhouse-go/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.47.0"
},
{
"name": "github.com/blang/semver/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.0.0"
},
{
"name": "github.com/cert-manager/cert-manager",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.21.0"
},
{
"name": "github.com/davecgh/go-spew",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.2-0.20180830191138-d8f796af33cc"
},
{
"name": "github.com/go-logr/logr",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.4"
},
{
"name": "github.com/go-logr/zapr",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/go-sql-driver/mysql",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "github.com/go-zookeeper/zk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/moby/moby/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.55.0"
},
{
"name": "github.com/onsi/ginkgo/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.32.0"
},
{
"name": "github.com/onsi/gomega",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.1"
},
{
"name": "github.com/sethvargo/go-envconfig",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.3"
},
{
"name": "github.com/testcontainers/testcontainers-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.43.0"
},
{
"name": "go.uber.org/zap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.28.0"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.3"
},
{
"name": "k8s.io/apiextensions-apiserver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.3"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.3"
},
{
"name": "k8s.io/client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.3"
},
{
"name": "sigs.k8s.io/controller-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.24.1"
},
{
"name": "sigs.k8s.io/randfill",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "sigs.k8s.io/yaml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/blang/semver/v4",
"direct": true,
"version": "v4.0.0",
"ecosystem": "go"
},
{
"name": "github.com/cert-manager/cert-manager",
"direct": true,
"version": "v1.21.0",
"ecosystem": "go"
},
{
"name": "github.com/clickhouse/clickhouse-go/v2",
"direct": true,
"version": "v2.47.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": true,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": true,
"version": "v1.4.4",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/zapr",
"direct": true,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/go-sql-driver/mysql",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/go-zookeeper/zk",
"direct": true,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": true,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/moby/api",
"direct": true,
"version": "v1.55.0",
"ecosystem": "go"
},
{
"name": "github.com/onsi/ginkgo/v2",
"direct": true,
"version": "v2.32.0",
"ecosystem": "go"
},
{
"name": "github.com/onsi/gomega",
"direct": true,
"version": "v1.42.1",
"ecosystem": "go"
},
{
"name": "github.com/sethvargo/go-envconfig",
"direct": true,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/testcontainers/testcontainers-go",
"direct": true,
"version": "v0.43.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": true,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": true,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": true,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "k8s.io/api",
"direct": true,
"version": "v0.36.3",
"ecosystem": "go"
},
{
"name": "k8s.io/apiextensions-apiserver",
"direct": true,
"version": "v0.36.3",
"ecosystem": "go"
},
{
"name": "k8s.io/apimachinery",
"direct": true,
"version": "v0.36.3",
"ecosystem": "go"
},
{
"name": "k8s.io/client-go",
"direct": true,
"version": "v0.36.3",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/controller-runtime",
"direct": true,
"version": "v0.24.1",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/randfill",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/yaml",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "cel.dev/expr",
"direct": false,
"version": "v0.25.2",
"ecosystem": "go"
},
{
"name": "dario.cat/mergo",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "filippo.io/edwards25519",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/antlr4-go/antlr/v4",
"direct": false,
"version": "v4.13.1",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-ansiterm",
"direct": false,
"version": "v0.0.0-20250102033503-faa5f7b0171c",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "v4.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v5",
"direct": false,
"version": "v5.0.3",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/clickhouse/ch-go",
"direct": false,
"version": "v0.73.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/errdefs",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/errdefs/pkg",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/log",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/containerd/platforms",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/cpuguy83/dockercfg",
"direct": false,
"version": "v0.3.2",
"ecosystem": "go"
},
{
"name": "github.com/distribution/reference",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-connections",
"direct": false,
"version": "v0.8.1",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-units",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/ebitengine/purego",
"direct": false,
"version": "v0.10.2",
"ecosystem": "go"
},
{
"name": "github.com/emicklei/go-restful/v3",
"direct": false,
"version": "v3.13.0",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch/v5",
"direct": false,
"version": "v5.9.11",
"ecosystem": "go"
},
{
"name": "github.com/felixge/httpsnoop",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.10.1",
"ecosystem": "go"
},
{
"name": "github.com/fxamacker/cbor/v2",
"direct": false,
"version": "v2.9.2",
"ecosystem": "go"
},
{
"name": "github.com/go-faster/city",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/go-faster/errors",
"direct": false,
"version": "v0.8.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/go-ole/go-ole",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonreference",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/cmdutils",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/conv",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/fileutils",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/jsonutils",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/loading",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/mangling",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/netutils",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/pools",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/stringutils",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/typeutils",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/yamlutils",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "github.com/go-task/slim-sprig/v3",
"direct": false,
"version": "v3.0.0",
"ecosystem": "go"
},
{
"name": "github.com/google/cel-go",
"direct": false,
"version": "v0.30.0",
"ecosystem": "go"
},
{
"name": "github.com/google/gnostic-models",
"direct": false,
"version": "v0.7.1",
"ecosystem": "go"
},
{
"name": "github.com/google/pprof",
"direct": false,
"version": "v0.0.0-20260507013755-92041b743c96",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.29.0",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.19.1",
"ecosystem": "go"
},
{
"name": "github.com/lufia/plan9stats",
"direct": false,
"version": "v0.0.0-20260330125221-c963978e514e",
"ecosystem": "go"
},
{
"name": "github.com/magiconair/properties",
"direct": false,
"version": "v1.18.11",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver/v3",
"direct": false,
"version": "v3.5.0",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-winio",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/moby/docker-image-spec",
"direct": false,
"version": "v1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/go-archive",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/moby/client",
"direct": false,
"version": "v0.5.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/patternmatcher",
"direct": false,
"version": "v0.6.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/spdystream",
"direct": false,
"version": "v0.5.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/sys/sequential",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/sys/user",
"direct": false,
"version": "v0.4.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/sys/userns",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/term",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.3-0.20250322232337-35a7c28c31ee",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/go-digest",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/image-spec",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/paulmach/orb",
"direct": false,
"version": "v0.13.0",
"ecosystem": "go"
},
{
"name": "github.com/pierrec/lz4/v4",
"direct": false,
"version": "v4.1.27",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
"ecosystem": "go"
},
{
"name": "github.com/power-devops/perfstat",
"direct": false,
"version": "v0.0.0-20240221224432-82ca36839d55",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": false,
"version": "v1.24.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.70.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.21.1",
"ecosystem": "go"
},
{
"name": "github.com/segmentio/asm",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/shirou/gopsutil/v4",
"direct": false,
"version": "v4.26.6",
"ecosystem": "go"
},
{
"name": "github.com/shopspring/decimal",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/sirupsen/logrus",
"direct": false,
"version": "v1.9.4",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": false,
"version": "v1.10.2",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.10",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": false,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/tklauser/go-sysconf",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/tklauser/numcpus",
"direct": false,
"version": "v0.12.0",
"ecosystem": "go"
},
{
"name": "github.com/x448/float16",
"direct": false,
"version": "v0.8.4",
"ecosystem": "go"
},
{
"name": "github.com/yusufpapurcu/wmi",
"direct": false,
"version": "v1.2.4",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"direct": false,
"version": "v0.69.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.4",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v3",
"direct": false,
"version": "v3.0.5",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20260508232706-74f9aab9d74a",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.57.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.48.0",
"ecosystem": "go"
},
{
"name": "gomodules.xyz/jsonpatch/v2",
"direct": false,
"version": "v2.5.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260720211330-0afa2a65878a",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260720211330-0afa2a65878a",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.82.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.12-0.20260120151049-f2248ac996af",
"ecosystem": "go"
},
{
"name": "gopkg.in/evanphx/json-patch.v4",
"direct": false,
"version": "v4.13.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/inf.v0",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "k8s.io/apiserver",
"direct": false,
"version": "v0.36.3",
"ecosystem": "go"
},
{
"name": "k8s.io/component-base",
"direct": false,
"version": "v0.36.3",
"ecosystem": "go"
},
{
"name": "k8s.io/klog/v2",
"direct": false,
"version": "v2.140.0",
"ecosystem": "go"
},
{
"name": "k8s.io/kube-openapi",
"direct": false,
"version": "v0.0.0-20260512234627-ef417d054102",
"ecosystem": "go"
},
{
"name": "k8s.io/streaming",
"direct": false,
"version": "v0.36.3",
"ecosystem": "go"
},
{
"name": "k8s.io/utils",
"direct": false,
"version": "v0.0.0-20260626114624-be93311217bd",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/apiserver-network-proxy/konnectivity-client",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/gateway-api",
"direct": false,
"version": "v1.6.1",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/json",
"direct": false,
"version": "v0.0.0-20250730193827-2d320260d730",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/structured-merge-diff/v6",
"direct": false,
"version": "v6.4.2",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 153,
"direct_count": 25,
"indirect_count": 128
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 207,
"open_issues": 8,
"closed_ratio": 0.871,
"closed_issues": 54,
"closed_unmerged_prs": 11
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "GrigoryPervakov",
"commits": 142,
"avatar_url": "https://avatars.githubusercontent.com/u/36988782?v=4"
},
{
"type": "User",
"login": "arekborucki",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/68437078?v=4"
},
{
"type": "User",
"login": "ashishch432",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/55024632?v=4"
},
{
"type": "User",
"login": "Blargian",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/41984034?v=4"
},
{
"type": "User",
"login": "scanhex12",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/75157521?v=4"
},
{
"type": "User",
"login": "sonirico",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/9306588?v=4"
},
{
"type": "User",
"login": "cyrilou242",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/27781189?v=4"
},
{
"type": "User",
"login": "Allex1",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/8087146?v=4"
},
{
"type": "User",
"login": "maitredede",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1765408?v=4"
},
{
"type": "User",
"login": "kapustor",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/25294423?v=4"
}
],
"contributors_sampled": 26,
"top_contributor_share": 0.728
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yaml",
"codeql.yaml",
"docs-lint.yaml",
"openshift-runner-rebuild.yaml",
"release-main.yml",
"release.yaml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 3,
"reason": "Found 7/20 approved changesets -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "406a508708ec26a8f4f62e4cd9c90994beace5c5",
"ran_at": "2026-07-30T02:08:49Z",
"aggregate_score": 8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T15:57:04Z",
"oldest_open_prs": [
{
"number": 214,
"created_at": "2026-06-02T23:07:10Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 258,
"created_at": "2026-07-07T07:53:10Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-28T15:46:31Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 19,
"created_at": "2025-07-22T17:34:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 65,
"created_at": "2026-01-29T14:21:09Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 144,
"created_at": "2026-03-23T18:40:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 196,
"created_at": "2026-05-26T16:49:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 217,
"created_at": "2026-06-03T17:48:02Z",
"last_comment_at": "2026-06-03T19:02:58Z",
"last_comment_author": "GrigoryPervakov"
},
{
"number": 244,
"created_at": "2026-06-22T13:52:42Z",
"last_comment_at": "2026-07-25T14:34:44Z",
"last_comment_author": "GrigoryPervakov"
},
{
"number": 266,
"created_at": "2026-07-14T14:28:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 272,
"created_at": "2026-07-20T16:56:51Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ClickHouse/clickhouse-operator",
"host": "github.com",
"name": "clickhouse-operator",
"owner": "ClickHouse"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"security": 84,
"vitality": 91,
"community": 58,
"governance": 72,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 91,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"commits_last_year": 193,
"human_commit_share": 0.89,
"days_since_last_push": 1,
"active_weeks_last_year": 41
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "41/52 weeks with commits",
"points": 28.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 41
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "193 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 193
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 7,
"latest_release_tag": "v0.0.7",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 28.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "7 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 7
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~28.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 28.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 5,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 5 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 5
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 58,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"forks": 33,
"stars": 268,
"watchers": 14,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "268 stars",
"points": 39.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 268
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "33 forks",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 33
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "14 watchers",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 14
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 72,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 26,
"top_contributor_share": 0.728
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 73% of commits",
"points": 6.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 73
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "26 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 26
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"merged_prs": 207,
"open_issues": 8,
"closed_issues": 54,
"issue_closed_ratio": 0.871,
"closed_unmerged_prs": 11
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "87% of issues closed",
"points": 40.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 87
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "207/218 decided PRs merged",
"points": 36.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 207,
"decided": 218
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 7/20 approved changesets -- score normalized to 3",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"followers": 1945,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "ClickHouse",
"public_repos": 359,
"account_age_days": 2522
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,945 followers of ClickHouse",
"points": 23.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1945,
"login": "ClickHouse"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "359 public repos, account ~6 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 359
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/ClickHouse/clickhouse-operator"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "7 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 7
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"clickhouse",
"go",
"kubernetes",
"database",
"helm-chart",
"kubernetes-operator"
],
"has_wiki": false,
"homepage": "https://clickhouse.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://clickhouse.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 84,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 7/20 approved changesets -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 153 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 153
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 153,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 153,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 86,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 8729
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "89 of 89 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 89,
"sampled": 89
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.12,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.11
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "12 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 12,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "11 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 11,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 54136,
"source_files_sampled": 78,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/78 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 78,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples",
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples, samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples, samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.14.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T02:09:15.711674Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/ClickHouse/clickhouse-operator.svg",
"full_name": "ClickHouse/clickhouse-operator",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.14.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.