Public record
Software health reportschema 0.31.0 · metrics 2.5.0 · 2026-08-05 09:34 UTC

kairos-io / kairos-operator

GoApache-2.0★ 8 stars⑂ 9 forkssince Apr 2024View on GitHub ↗
KindLibraryApplicationhow this is determined

kairos-io/kairos-operator holds a health index of 75 out of 100, placing it in the Good band. It scores highest on Vitality (87/100) and lowest on Community & Adoption (35/100). It was last updated today. A single contributor accounts for most of its recent work.

75
overall / 100
Good

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

75
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 65 is calibrated to 75 on the published index scale (record calibration 2026-08-02).

Ownership

KairosOrganization
149 followers57 public repossince Aug 2022

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Gogithub.com/kairos-io/kairos-operatorv0.1.2-248 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

87Excellent · 21% of overall
How it's scored
36/36Push recency — last push 0 days ago
13.8/36Commit cadence — 20/52 weeks with commits
18/18Commit volume — 109 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year109
human_commit_share0.4
days_since_last_push0
active_weeks_last_year20

Release discipline

100Exceptional
How it's scored
27/27Ships releases — 24 releases published
36/36Release recency — latest release 8 days ago
27/27Release cadence — a release every ~16.1 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count24
latest_release_tagv0.1.2
releases_from_tagsno
days_since_latest_release8
mean_days_between_releases16.1
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

35Weak · 17% of overall
How it's scored
13.7/60Stars — 8 stars
7.5/25Forks — 9 forks
0/15Watchers — 2 watchers
Inputs used
forks9
stars8
watchers2
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (Apache-2.0)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges1
has_contributingno
has_issue_templateno
has_code_of_conductno
readme_badge_servicesgithub.com
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

65Good · 23% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
2.1/22.5Commit distribution — top contributor authored 90% of commits
10.8/13.5Contributor breadth — 8 contributors
10/10OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10
Inputs used
bus_factor1
contributors_sampled8
top_contributor_share0.905
How it's scored
26.7/42Issue resolution — 64% of issues closed
27/30PR acceptance — 125/139 decided PRs merged
13/13Newcomer PR acceptance — 3/3 first-time contributors' PRs merged in 30d
10.5/15OpenSSF Scorecard: Code-Review — Found 5/7 approved changesets -- score normalized to 7
Inputs used
merged_prs125
open_issues4
closed_issues7
prs_merged_7d1
prs_decided_7d1
prs_merged_30d5
prs_decided_30d6
issue_closed_ratio0.636
closed_unmerged_prs14
first_time_authors_30d1
first_time_prs_merged_30d3
first_time_prs_decided_30d3
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
15.6/25Owner reach — 149 followers of kairos-io
20.7/25Track record — 57 public repos, account ~3 yr old
Inputs used
followers149
owner_typeOrganization
is_verified
owner_loginkairos-io
public_repos57
account_age_days1,434

Package maintenance

100Exceptional
How it's scored
25/25Published & resolvable — 1 package(s) on go
35/35Publish recency — latest publish 8 days ago
20/20Version history — 24 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesgithub.com/kairos-io/kairos-operator
ecosystemsgo
any_deprecatedno
min_days_since_publish8

Engineering Quality

Are baseline engineering and documentation practices in place?

61Moderate · 19% of overall
How it's scored
24/24CI workflows — 5 workflow(s)
24/24Tests present
16/16Linter config — .golangci.yml
0/9.6Pre-commit hooks
0/6.4.editorconfig
18/20OpenSSF Scorecard: CI-Tests — 26 out of 28 merged PRs checked by a CI test -- score normalized to 9
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno

Documentation

30At Risk
How it's scored
30/30README
0/25Documentation directory
0/15Documentation / homepage site
0/10Repository description
0/10Topics
0/10Wiki
Inputs used
topics
has_wikino
homepage
has_readmeyes
has_docs_dirno
has_descriptionno

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

68Good · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
3.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.2/2.5CI-Tests — 26 out of 28 merged PRs checked by a CI test -- score normalized to 9
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
5.2/7.5Code-Review — Found 5/7 approved changesets -- score normalized to 7
2.5/2.5Contributors — project has 3 contributing companies or organizations -- score normalized to 10
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
0/5Pinned-Dependencies — no data
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
3.8/7.5Vulnerabilities — 5 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate6
Excluded from scoring (no data or not applicable): packaging, pinned_dependencies, signed_releases. Remaining weights renormalized.

Dependency advisories

100Exceptional
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories7
affected_packages5
assessed_packages92
unassessed_packages0
affected_by_severitycritical 1, high 1, moderate 1, unknown 2
direct_affected_packages0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 92 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

73Good · 4% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 35 of 40 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.875
agent_instruction_files
agent_instruction_max_bytes
How it's scored
18/18One-command bootstrap — Makefile
22/22Automated tests
11/11Lint / format config — .golangci.yml
11/11Static type checking — Go (statically typed)
10/10Reproducible environment — devcontainer, Dockerfile, lockfile
10/10Demonstrated agent practice — 11 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 49 of the last 100 commits are automated dependency updates
0/10OpenSSF Scorecard: Pinned-Dependencies — no data
Inputs used
has_nixno
has_testsyes
lockfilesgo.sum
has_dockerfileyes
typed_languageyes
bootstrap_filesMakefile
has_devcontaineryes
has_linter_configyes
typecheck_configs
agent_commit_share0.11
toolchain_manifestsgo.mod
dependency_bot_commit_share0.49
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
How it's scored
45/45Type-checkable code — Go (statically typed)
53.7/55Manageable file sizes — 1/43 source files over 60KB
Inputs used
primary_languageGo
largest_source_bytes126,092
source_files_sampled43
oversized_source_files1
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
0/20MCP server
40/40Runnable examples — examples, samples
Inputs used
example_dirsexamples, samples
has_mcp_signalno
api_schema_files

Key facts

8GitHub stars
8contributors
109commits, last 12 months
0days since last push
24releases
1bus factor
4open issues
Gopackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

Star and fork history 0 ★ / 9 ⇿
0Stars
9Forks
13Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

0246810912025-102026-032026-07
Major 0Minor 1Patch 4
OpenSSF Scorecard 6.0 / 10
6.0aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-05 09:33 UTC

10Binary-Artifactsno binaries found in the repo
5Branch-Protectionbranch protection is not maximal on development and all release branches
9CI-Tests26 out of 28 merged PRs checked by a CI test -- score normalized to 9
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
7Code-ReviewFound 5/7 approved changesets -- score normalized to 7
10Contributorsproject has 3 contributing companies or organizations -- score normalized to 10
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
n/aPinned-Dependenciesinternal error: internal error: invalid Dockerfile
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
5Vulnerabilities5 existing vulnerabilities detected
Direct dependencies 8
RegistryPackageVersion constraintManifest
Goal.essio.dev/pkg/shellescapev1.6.0go.mod
Gogithub.com/onsi/ginkgo/v2v2.32.0go.mod
Gogithub.com/onsi/gomegav1.42.1go.mod
Gok8s.io/apiv0.36.3go.mod
Gok8s.io/apimachineryv0.36.3go.mod
Gok8s.io/client-gov0.36.3go.mod
Gosigs.k8s.io/controller-runtimev0.24.1go.mod
Gosigs.k8s.io/yamlv1.6.0go.mod
All dependencies 92

Full resolved dependency set from the GitHub dependency graph: 8 direct and 84 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Goal.essio.dev/pkg/shellescapev1.6.0direct
Gogithub.com/onsi/ginkgo/v2v2.32.0direct
Gogithub.com/onsi/gomegav1.42.1direct
Gok8s.io/apiv0.36.3direct
Gok8s.io/apimachineryv0.36.3direct
Gok8s.io/client-gov0.36.3direct
Gosigs.k8s.io/controller-runtimev0.24.1direct
Gosigs.k8s.io/yamlv1.6.0direct
Gocel.dev/exprv0.25.1indirect
Gogithub.com/antlr4-go/antlr/v4v4.13.0indirect
Gogithub.com/beorn7/perksv1.0.1indirect
Gogithub.com/blang/semver/v4v4.0.0indirect
Gogithub.com/cenkalti/backoff/v5v5.0.3indirect
Gogithub.com/cespare/xxhash/v2v2.3.0indirect
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33ccindirect
Gogithub.com/emicklei/go-restful/v3v3.13.0indirect
Gogithub.com/evanphx/json-patch/v5v5.9.11indirect
Gogithub.com/felixge/httpsnoopv1.0.4indirect
Gogithub.com/fsnotify/fsnotifyv1.9.0indirect
Gogithub.com/fxamacker/cbor/v2v2.9.0indirect
Gogithub.com/go-logr/logrv1.4.3indirect
Gogithub.com/go-logr/stdrv1.2.2indirect
Gogithub.com/go-logr/zaprv1.3.0indirect
Gogithub.com/go-openapi/jsonpointerv0.21.0indirect
Gogithub.com/go-openapi/jsonreferencev0.20.2indirect
Gogithub.com/go-openapi/swagv0.23.0indirect
Gogithub.com/go-task/slim-sprig/v3v3.0.0indirect
Gogithub.com/google/cel-gov0.26.0indirect
Gogithub.com/google/gnostic-modelsv0.7.0indirect
Gogithub.com/google/go-cmpv0.7.0indirect
Gogithub.com/google/pprofv0.0.0-20260402051712-545e8a4df936indirect
Gogithub.com/google/uuidv1.6.0indirect
Gogithub.com/grpc-ecosystem/grpc-gateway/v2v2.27.7indirect
Gogithub.com/inconshreveable/mousetrapv1.1.0indirect
Gogithub.com/josharian/internv1.0.0indirect
Gogithub.com/json-iterator/gov1.1.12indirect
Gogithub.com/mailru/easyjsonv0.7.7indirect
Gogithub.com/masterminds/semver/v3v3.4.0indirect
Gogithub.com/modern-go/concurrentv0.0.0-20180306012644-bacd9c7ef1ddindirect
Gogithub.com/modern-go/reflect2v1.0.3-0.20250322232337-35a7c28c31eeindirect
Gogithub.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822indirect
Gogithub.com/pmezard/go-difflibv1.0.1-0.20181226105442-5d4384ee4fb2indirect
Gogithub.com/prometheus/client_golangv1.23.2indirect
Gogithub.com/prometheus/client_modelv0.6.2indirect
Gogithub.com/prometheus/commonv0.67.5indirect
Gogithub.com/prometheus/procfsv0.19.2indirect
Gogithub.com/spf13/cobrav1.10.2indirect
Gogithub.com/spf13/pflagv1.0.9indirect
Gogithub.com/stoewer/go-strcasev1.3.0indirect
Gogithub.com/x448/float16v0.8.4indirect
Gogo.opentelemetry.io/auto/sdkv1.2.1indirect
Gogo.opentelemetry.io/contrib/instrumentation/net/http/otelhttpv0.65.0indirect
Gogo.opentelemetry.io/otelv1.41.0indirect
Gogo.opentelemetry.io/otel/exporters/otlp/otlptracev1.40.0indirect
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcv1.40.0indirect
Gogo.opentelemetry.io/otel/metricv1.41.0indirect
Gogo.opentelemetry.io/otel/sdkv1.40.0indirect
Gogo.opentelemetry.io/otel/tracev1.41.0indirect
Gogo.opentelemetry.io/proto/otlpv1.9.0indirect
Gogo.uber.org/multierrv1.11.0indirect
Gogo.uber.org/zapv1.27.1indirect
Gogo.yaml.in/yaml/v2v2.4.3indirect
Gogo.yaml.in/yaml/v3v3.0.4indirect
Gogolang.org/x/expv0.0.0-20251219203646-944ab1f22d93indirect
Gogolang.org/x/modv0.36.0indirect
Gogolang.org/x/netv0.56.0indirect
Gogolang.org/x/oauth2v0.34.0indirect
Gogolang.org/x/syncv0.21.0indirect
Gogolang.org/x/sysv0.46.0indirect
Gogolang.org/x/termv0.44.0indirect
Gogolang.org/x/textv0.38.0indirect
Gogolang.org/x/timev0.14.0indirect
Gogolang.org/x/toolsv0.45.0indirect
Gogomodules.xyz/jsonpatch/v2v2.4.0indirect
Gogoogle.golang.org/genproto/googleapis/apiv0.0.0-20260128011058-8636f8732409indirect
Gogoogle.golang.org/genproto/googleapis/rpcv0.0.0-20260128011058-8636f8732409indirect
Gogoogle.golang.org/grpcv1.79.3indirect
Gogoogle.golang.org/protobufv1.36.12-0.20260120151049-f2248ac996afindirect
Gogopkg.in/evanphx/json-patch.v4v4.13.0indirect
Gogopkg.in/inf.v0v0.9.1indirect
Gogopkg.in/yaml.v3v3.0.1indirect
Gok8s.io/apiextensions-apiserverv0.36.0indirect
Gok8s.io/apiserverv0.36.0indirect
Gok8s.io/component-basev0.36.0indirect
Gok8s.io/klog/v2v2.140.0indirect
Gok8s.io/kube-openapiv0.0.0-20260317180543-43fb72c5454aindirect
Gok8s.io/streamingv0.36.3indirect
Gok8s.io/utilsv0.0.0-20260210185600-b8788abfbbc2indirect
Gosigs.k8s.io/apiserver-network-proxy/konnectivity-clientv0.34.0indirect
Gosigs.k8s.io/jsonv0.0.0-20250730193827-2d320260d730indirect
Gosigs.k8s.io/randfillv1.0.0indirect
Gosigs.k8s.io/structured-merge-diff/v6v6.3.3indirect
Dependency advisories 5

This repository publishes no package the index resolves, so its own dependency graph was assessed — 92 packages, which also include development and test pins that never ship: 5 carry known advisories, of which 0 are direct.

PackageVersionRelationSeverityAdvisoriesFixed in
google.golang.org/grpcv1.79.3indirectcritical21.82.1
go.opentelemetry.io/otel/sdkv1.40.0indirecthigh21.43.0
github.com/google/cel-gov0.26.0indirectmoderate10.29.0
go.opentelemetry.io/otelv1.41.0indirectunknown11.44.0
golang.org/x/textv0.38.0indirectunknown10.39.0

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "icon": {
      "bytes": 12054,
      "width": 256,
      "height": 256,
      "rejected": [],
      "collected": true,
      "media_type": "image/png",
      "source_url": "https://avatars.githubusercontent.com/u/112549704?v=4&s=256",
      "source_type": "avatar",
      "content_hash": "74187a65f3a3f7e117953d9599402ee3a73489740ed503a1e2decfad8fbaab08",
      "candidates_considered": 1
    },
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 651,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 637382,
        "Shell": 603,
        "Makefile": 12682,
        "Dockerfile": 1756
      },
      "pushed_at": "2026-08-05T05:47:19Z",
      "created_at": "2024-04-16T08:40:11Z",
      "owner_type": "Organization",
      "updated_at": "2026-08-03T17:26:54Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://kairos.io",
      "name": "Kairos",
      "type": "Organization",
      "login": "kairos-io",
      "company": null,
      "location": null,
      "followers": 149,
      "avatar_url": "https://avatars.githubusercontent.com/u/112549704?v=4",
      "created_at": "2022-08-31T09:42:28Z",
      "is_verified": null,
      "public_repos": 57,
      "account_age_days": 1434
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-07-28T06:23:19Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-07-22T05:36:36Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-07-02T10:05:23Z"
        },
        {
          "tag": "v0.1.0-beta8",
          "kind": "prerelease",
          "published_at": "2026-06-25T07:58:39Z"
        },
        {
          "tag": "v0.1.0-beta7",
          "kind": "prerelease",
          "published_at": "2026-06-04T06:17:28Z"
        },
        {
          "tag": "v0.1.0-beta6",
          "kind": "prerelease",
          "published_at": "2026-04-22T13:14:24Z"
        },
        {
          "tag": "v0.1.0-beta5",
          "kind": "prerelease",
          "published_at": "2026-04-09T07:29:34Z"
        },
        {
          "tag": "v0.1.0-beta4",
          "kind": "prerelease",
          "published_at": "2026-04-02T10:10:37Z"
        },
        {
          "tag": "v0.1.0-beta3",
          "kind": "prerelease",
          "published_at": "2026-03-19T08:47:03Z"
        },
        {
          "tag": "v0.1.0-beta2",
          "kind": "prerelease",
          "published_at": "2026-03-05T12:25:49Z"
        },
        {
          "tag": "v0.1.0-beta1",
          "kind": "prerelease",
          "published_at": "2026-03-03T14:43:47Z"
        },
        {
          "tag": "v0.0.7",
          "kind": "patch",
          "published_at": "2026-02-19T07:25:35Z"
        },
        {
          "tag": "v0.0.6",
          "kind": "patch",
          "published_at": "2026-02-17T10:36:11Z"
        },
        {
          "tag": "v0.0.5",
          "kind": "patch",
          "published_at": "2026-01-27T12:44:02Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-01-21T11:21:35Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2025-08-27T08:56:17Z"
        },
        {
          "tag": "v0.0.2",
          "kind": "patch",
          "published_at": "2025-08-07T06:56:40Z"
        },
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2025-06-10T11:58:26Z"
        },
        {
          "tag": "v0.0.1-rc6",
          "kind": "prerelease",
          "published_at": "2025-06-10T10:58:17Z"
        },
        {
          "tag": "v0.0.1-rc5",
          "kind": "prerelease",
          "published_at": "2025-06-10T10:38:04Z"
        },
        {
          "tag": "v0.0.1-rc4",
          "kind": "prerelease",
          "published_at": "2025-05-28T14:25:56Z"
        },
        {
          "tag": "v0.0.1-rc3",
          "kind": "prerelease",
          "published_at": "2025-05-28T13:54:35Z"
        },
        {
          "tag": "v0.0.1-rc2",
          "kind": "prerelease",
          "published_at": "2025-05-28T12:35:21Z"
        },
        {
          "tag": "v0.0.1-rc1",
          "kind": "prerelease",
          "published_at": "2025-05-28T07:25:18Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "8338731801be8ddccaee740f53420189dbc0ff78",
          "body": "Signed-off-by: Bohdan Leshchenko <bohdan.leshchenko1@gmail.com>",
          "is_bot": false,
          "headline": "feat: artifact name override (#154)",
          "author_name": "Bohdan Leshchenko",
          "author_login": "thebhdn",
          "committed_at": "2026-08-03T09:43:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c05c64cdfe76871f7ca2fc78c9450b7f43a339ef",
          "body": "Aligns the operator's baked-in KAIROS_INIT default with the version\npinned in kairos-io/kairos images/Dockerfile on master (was v0.7.0,\nnow v0.16.1). Also updates the two example manifests that reference\nthe same tag so users see the current version.\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "chore: bump default kairos-init to v0.16.1",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-07-30T14:09:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e70019d2306b7eab305fefe8c7c186c93d83e45",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.2 (#151)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T06:42:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ef4f75c2e89bc98691518a0e344358abcacec7d",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update quay.io/kairos/operator Docker tag to v0.1.2 (#152)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-28T06:41:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07eb9a2a7f991d11846b6787024aa4ee90971c07",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/login-action digest to abd2ef4 (#149)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-28T06:22:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c7aab71267bf600d0bf634a82665cbe673ac511",
          "body": "…ged files (#150)\n\n* feat(nodeopupgrade): expose ExcludePaths and always exclude host-managed files\n\nPasses each path in Spec.ExcludePaths as a --exclude-path arg to\n`kairos-agent upgrade` so those host paths are preserved by the upgrade\nrsync. Always prepends /etc/hostname and /etc/hosts because th\n[…]\narakasilis.me>\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(nodeopupgrade): expose ExcludePaths and always exclude host-mana…",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-07-28T06:20:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "64f59efb98daa711703fdaad120d2cb37a196769",
          "body": "Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "`make manifests`",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-07-27T09:47:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e718df21b22d2ae7a0ef56fde42790ca44e5f85e",
          "body": "Signed-off-by: Bohdan Leshchenko <bohdan.leshchenko1@gmail.com>",
          "is_bot": false,
          "headline": "refactor: move defer to BeforeEach in nodeop ctrl tests (#148)",
          "author_name": "Bohdan Leshchenko",
          "author_login": "thebhdn",
          "committed_at": "2026-07-27T07:12:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a100cf84cc6c74c36a59d62490d727fc2c84d43",
          "body": "* feat(ctrl): set hostMountPath dir\n\nSigned-off-by: Bohdan Leshchenko <bohdan.leshchenko1@gmail.com>\n\n* chore: add test & move var to const\n\nSigned-off-by: Bohdan Leshchenko <bohdan.leshchenko1@gmail.com>\n\n---------\n\nSigned-off-by: Bohdan Leshchenko <bohdan.leshchenko1@gmail.com>",
          "is_bot": false,
          "headline": "feat(ctrl): set hostMountPath dir (#145)",
          "author_name": "Bohdan Leshchenko",
          "author_login": "thebhdn",
          "committed_at": "2026-07-24T06:37:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87ed8d70e553f9d20f23431858e44ac3628594bb",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update kubernetes to v0.36.3 (#146)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-24T05:52:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30f287b7001ce3bb4e25966f34519142f106a91e",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/login-action digest to 06fb636 (#147)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-24T05:51:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e7bd08607b8d32bebad48fd6b85584e56cb5dc4",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.1 (#143)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T05:59:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4530931060c16d80e8a85506502f6944f127b143",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update quay.io/kairos/operator Docker tag to v0.1.1 (#144)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T05:56:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "507bf98d49c46894608113b49ca09b5aa21b0293",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update gcr.io/distroless/static:nonroot Docker digest to f7f8f72 (#138)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T05:28:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58387cca5524a7298b6b9ef5ed17670f59123cd2",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/setup-go action to v7 (#140)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T05:26:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b8e2c3d3c9f98428e45fd2a3c5c4a14ea52c655",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker.io/golang:1.26.5 Docker digest to 3aff665 (#139)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T05:25:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f52e8e634b0a17b7b72f4c6b7dab40c2200dff3f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/checkout digest to 3d3c42e (#141)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T05:22:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4c2b928969837ce8e6fc31295632744486bc661",
          "body": "…init ref (#142)\n\nThe default OCI build template hardcoded quay.io/kairos/kairos-init as\nthe base for the kairos-init stage. Callers that want to pin the full\nref (for example, an air-gapped mirror or a specific SHA) had to fall\nback to the OCISpec advanced mode and write their own Dockerfile.\n\nAdd \n[…]\ns-init actually runs; the\npre-built Ref path and OCISpec-only path do not use it.\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(build): add BuildOptions.KairosInitImage to override the kairos-…",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-07-22T05:20:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0adbacccc1386c14d97e735b3cd07f4160b214d8",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker.io/golang Docker tag to v1.26.5 (#136)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-14T08:49:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c99dfac6f34c99eefb1d3f2d87f0d9d0171ccbd9",
          "body": null,
          "is_bot": true,
          "headline": "Update docker/login-action digest to af1e73f (#135)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T09:03:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e999015df5e3390821497589f839f0e07161699f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/setup-buildx-action digest to bb05f3f (#133)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T10:27:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fb00059f02611d0449c14e9c872169bcc2b9707",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.0 (#132)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-02T10:26:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "438204ad27ec6ab3a2a666175a50890db078eddb",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update quay.io/kairos/operator Docker tag to v0.1.0 (#134)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T10:25:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "450f0cea1ff3a31f26e4399c28c555e80fef3d8d",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/login-action digest to c99871d (#130)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T09:28:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b4c8ac60f577811d94a8791be3e1fb2452f389b",
          "body": "…v4 (#131)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update ghcr.io/devcontainers/features/docker-in-docker Docker tag to …",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T09:28:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f74214873d809a44f7589fd64e77c2e34e67100",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/checkout action to v7 (#129)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T08:57:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f1a9aa43af508ce6caf8e392ac28195be055a8d",
          "body": "* Update kubernetes monorepo to v0.36.2\n\n* fix(deps): bump controller-runtime to v0.24.1 for k8s.io v0.36 compatibility\n\nk8s.io/client-go v0.36 adds a HasSyncedChecker method to the\nResourceEventHandlerRegistration interface, which controller-runtime\nv0.23.3 does not implement. Bumping to v0.24.1 re\n[…]\ned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": true,
          "headline": "Update kubernetes monorepo to v0.36.2 (#93)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T08:52:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93d440e68cf0f12cd7bf22e28d5917dc41247f5c",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update azure/setup-kubectl digest to 8293235 (#91)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:42:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4308b2be7e72937bb49c9eda891a50f9c4934496",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update gcr.io/distroless/static:nonroot Docker digest to 963fa6c (#102)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:40:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfbaaf76af2c95a351c302513b7e10dc08719859",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/onsi/ginkgo/v2 to v2.32.0 (#98)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:32:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b78faa2d419050fbd622090a2e762f31fe9d1a3c",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update alpine Docker tag to v3.24 (#127)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:31:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35d956e900215e5c2e4ff3148809824d52c0c526",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/build-push-action digest to 53b7df9 (#89)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:29:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c87cdbd2c7c140b230c200c87526e2cfda4b5424",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/setup-qemu-action digest to 96fe6ef (#125)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:27:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "470f22feb0c5f60c029763150d532c7be7caad31",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update golangci/golangci-lint-action digest to ba0d7d2 (#126)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:26:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4da010fa6338bd9351c79f8428db5f45ddf087a5",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update alpine:3.23 Docker digest to fd791d7 (#92)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:25:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "869b6203f11776a37c5d7f6d0aea84071c1c4855",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/setup-buildx-action digest to d7f5e7f (#124)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T06:22:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6b7dd459af39af5b53285142db52d49e67bc634",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/onsi/gomega to v1.42.1 (#100)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T05:59:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "182de06886bf50804e19b47d5f3ef4ff2cf575a5",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/setup-go digest to 924ae3a (#117)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T05:59:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89554f020a2108130cd625b7c950fca69540923f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/login-action digest to 650006c (#118)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T05:58:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f9a8a1fa9648aeaf528794b69e377ae6e4ba16e",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker.io/golang:1.26.4 Docker digest to f96cc55 (#119)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T05:57:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e76a6f25438974e1bc543e93bf19590d263c63d",
          "body": "…ure (#123)\n\n* feat(nodeop): add UncordonOnFailure to recover cordoned nodes on failure\n\nAdd an opt-in UncordonOnFailure field to NodeOpSpec (default false). When\ntrue and the node was cordoned by this NodeOp, the operator uncordons the\nnode after its job fails, instead of leaving it unschedulable. \n[…]\nch the helper already\ndoes.\n\nAddresses review feedback on #123.\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "feat(nodeop): add UncordonOnFailure to recover cordoned nodes on fail…",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-07-02T05:56:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9304a8da23f1f3e8672134e8ed7e3c7157f2b011",
          "body": "As discussed here:\n\nhttps://github.com/kairos-io/kairos/issues/4108#issuecomment-4798955031\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Add debug flag to NodeOpUpgrade (#122)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-07-01T11:01:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba141bf89073e2576c9a51af2bebe4641e3fe0a6",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.0-beta8 (#120)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T11:08:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c41306af3a5d4b0f248fbeef3c3d36d63106835",
          "body": "* feat: pass --allow-insecure-registries to unpack of image.ref\n\nWhen PullInsecureRegistry is set, auroraboot unpack of a pre-built image.ref\nnow allows plain HTTP / untrusted TLS registries.\n\nPart of https://github.com/kairos-io/kairos/issues/4081\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <nore\n[…]\ned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Allow insecure registries (#116)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-06-25T07:56:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5cb96478183f488c805557c9a82c3836362653b2",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/checkout digest to df4cb1c (#114)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-24T14:27:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5569533929cac5ccc1f10145a33d3da5d844076f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker.io/golang:1.26.4 Docker digest to 8f4cb3b (#115)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-24T14:26:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71cab7e427675172a5afa36e113327834bdc933a",
          "body": "* chore(deps): bump x/crypto, x/net and go to fix CVEs\n\n## Summary\nBumps vulnerable golang.org/x dependencies and aligns the go directive to 1.26.4.\n\n## Advisories addressed\n- golang.org/x/crypto (>=v0.52.0): GO-2026-5005, GO-2026-5006, GO-2026-5017, GO-2026-5019, GO-2026-5020, GO-2026-5021, GO-2026\n[…]\nsor <cursoragent@cursor.com>\nSigned-off-by: Mauro Morales <contact@mauromorales.com>\n\n---------\n\nSigned-off-by: Mauro Morales <contact@mauromorales.com>\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(deps): bump x/crypto, x/net and go to fix CVEs (#113)",
          "author_name": "Mauro Morales",
          "author_login": "mauromorales",
          "committed_at": "2026-06-08T08:55:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "809ed1666667b957fab9331943d952c44524aa29",
          "body": "* Implement pre-flight check and skip upgrading Node that are no-op\n\nThis is a generic mechanism that we also leverage to avoid draining and\ncordoning Nodes that are on the same image as the upgrade one. The old\nsolution skipped the upgrade itself, but still cordonded and drained the\nNodes and also \n[…]\nakasilis <dimitris@karakasilis.me>\n\n* Create preflight e2e test\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Implement pre-flight check and skip upgrading Node that are no-op (#111)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-06-04T06:15:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17d09fbb57ba0bbb705b3debe628e4ab1ac4b452",
          "body": "Fixes https://github.com/kairos-io/kairos/issues/4093\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Alway sort control plane nodes first (#108)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-06-01T11:02:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ab1138ca056b39ce8e8044e3df434968fd865ed",
          "body": "* Keep track of who cordoned a Node\n\nand don't uncordon it if it wasn't done by our operator of NodeOp\n\nFixes https://github.com/kairos-io/kairos-operator/issues/105\n\nAuthored with Claude AI\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Address copilot review suggestions\n\nSigned-\n[…]\n.com/kairos-io/kairos-operator/pull/106#issuecomment-4517810914\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Keep track of who cordoned a Node (#106)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-05-22T12:51:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "952b494c0c15973cef81a058db09e602e8fc7779",
          "body": "* Specify the golangci-lint version in only one place\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Fixing linting errors\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Fix linter (#107)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-05-22T08:49:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e83a5364b0985967f161e489b36e85b7dbe7c8d8",
          "body": "* Pass down selector,affinity and tolerations to the builder Job\n\nFixes: https://github.com/kairos-io/kairos/issues/455\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Also pass down labels and annotations\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Generate m\n[…]\ntris@karakasilis.me>\n\n* Add example for different arch building\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Pass down selector,affinity and tolerations to the builder Job (#99)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-28T14:37:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e8d972fc581736ef42eb501775045b1dad81db5c",
          "body": "* Migrate from kaniko to buildah\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* fix: use docker-archive format for Buildah output and fix NodeLabelerDaemonSet cache race\n\nBuildah's oci-archive transport writes OCI Image Layout (index.json +\nblobs/) which auroraboot's ocifile: hand\n[…]\n-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Fix test\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Migrate from kaniko to buildah (#97)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-28T14:35:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8e539853e0db2c2f250363778dee43ca4c33538f",
          "body": "…(#95)\n\n* Let the labeler run in a loop and create more labels and annotations\n\nusing the values in kairos-release. This is preparation work to be able\nto run it as a DaemonSet too.\n\nSee more here:\n\nhttps://github.com/kairos-io/kairos/issues/3971#issuecomment-4281056270\n\nSigned-off-by: Dimitris Kara\n[…]\n test by validating we have 1/2 nodes running the daemonset Pod\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Let the labeler run in a loop and create more labels and annotations …",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-22T13:13:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ff4adeb357f7e4f685ac9dec91e64018790eb35a",
          "body": "* Fix devcontainer DIND configuration for trixie\n\nSee https://github.com/devcontainers/features/pull/1482 for details\n\nSigned-off-by: Sébastien Masset <86793256+smasset-orange@users.noreply.github.com>\n\n* Improve Docker build cache usage\n\nSigned-off-by: Sébastien Masset <86793256+smasset-orange@user\n[…]\neler_controller setup\n\nSigned-off-by: Sébastien Masset <86793256+smasset-orange@users.noreply.github.com>\n\n---------\n\nSigned-off-by: Sébastien Masset <86793256+smasset-orange@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Fix labeler jobs for nodes with readonly FS (#74)",
          "author_name": "smasset-orange",
          "author_login": "smasset-orange",
          "committed_at": "2026-04-21T14:42:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a33e98e75213ecd945de9c8cb881cd1546ed01f5",
          "body": "* Mount the whole `/etc` directory\n\nbecause `/etc/kairos-release` doesn't exist in non-Kairos nodes and it\nwill not allow the Pods to be even scheduled on read-only Nodes that\ndon't have the file (because it can't be created).\n\nSee here for more:\n\nhttps://github.com/kairos-io/kairos-operator/pull/74\n[…]\nease should also be treated as non-Kairos\n\nand not fail the Job\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Mount the whole `/etc` directory (#94)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-21T08:13:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b6aab574c81a7d16c780fdfef85b9c20b0ff6497",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.0-beta4 (#84)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-09T05:56:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64870d42307f101eaa8d2dad890c3ec3407d4cc9",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Pin dependencies (#87)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:55:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "614b34ba5c4c6323a6e372fa6560a277a83a3c98",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.3 (#71)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:47:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e6a0230ff418e63150cae2dee8429f786c2d3f9",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/build-push-action action to v7 (#72)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:46:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5139bea95c683fe1b9763a8cbe3c6440552b637",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/setup-buildx-action action to v4 (#69)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:45:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c08ed31e09dfb96b0936fdc3e240044a1d788692",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/login-action action to v4 (#68)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:44:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da671e78f015761165a49b708814e977871284fd",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update docker/setup-qemu-action action to v4 (#66)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:44:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76cc1b84c806fb4b6cd2158f9260b2422e1b4c58",
          "body": "Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Don't use \"latest\"",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-09T05:43:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed97404c7b7a3986607f5ea3bf5550b43604e77f",
          "body": "because tags are mutable and as such not secure.\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Use digests when bumping with renovate",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-09T05:35:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cf35dbb4ae39084fd8c344ea08db459c610eed9",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update kubernetes monorepo to v0.35.3 (#78)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:25:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52e5a7e024f7cf8b6dbaa46f2351a725ad176117",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update azure/setup-kubectl action to v5 (#80)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-04-09T05:24:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e38ab860f8237b1288b07ffcab7e1ca7b6e4d383",
          "body": "* Add ability to customize `NodeOp` (and `NodeOpUpgrade`) images for air-gapped environments\n\nSigned-off-by: rdeleulopesp <rdeleulopesp@bloomberg.net>\n\n* Fix linting\n\nSigned-off-by: rdeleulopesp <rdeleulopesp@bloomberg.net>\n\n---------\n\nSigned-off-by: rdeleulopesp <rdeleulopesp@bloomberg.net>",
          "is_bot": false,
          "headline": "Add ability to customize `NodeOp` (and `NodeOpUpgrade`) images (#86)",
          "author_name": "Rodrigo Pontes",
          "author_login": "RodrigoDLPontes",
          "committed_at": "2026-04-09T05:23:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf1c717146cf886b90000b3ea9ab437869061c12",
          "body": "* Make artifacts volume configurable by the user\n\nThis will allow the users to mount it to hostPath if they want to,\nallowing easy copying of artifacts to local directories when local\nsingle node clusters are used.\n\nWe are going to use it as part of out reusable workflow:\n\nhttps://github.com/kairos-\n[…]\nris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: jimmykarily <2794419+jimmykarily@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Make artifacts volume configurable by the user (#79)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-02T07:48:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e41718637a54014e1ed136ea2864a04c43b52f5f",
          "body": "* Revert hard-immutability\n\nbecause when we apply with SSA it happens that the patch we generate\ncould include changes in the immutable `spec` field, even if we didn't\nexplicitly change anything there:\n\nhttps://github.com/kairos-io/kairos-operator/blob/4fe99f0708129b21037a00f00bfb237db6e18b3b/intern\n[…]\nris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: jimmykarily <2794419+jimmykarily@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Revert hard-immutability (#83)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-04-02T07:18:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "621504e9094a294cbd30d81bc384aa7ca16e490a",
          "body": "Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>",
          "is_bot": false,
          "headline": "feat: age additional printer column for OSArtifact API (#82)",
          "author_name": "Dario Tranchitella",
          "author_login": "prometherion",
          "committed_at": "2026-04-02T05:39:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fe99f0708129b21037a00f00bfb237db6e18b3b",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.0-beta3 (#77)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-19T09:06:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "055bf726fa6efb0a026be98280e42110e7c4650f",
          "body": "* Make OSArtifact an immutable resource\n\nthe same way Kubernetes Jobs are immutable after creation. OSAartifacts\nare one-off build instructions. There is no point in updating one\nbecause there is no state to be reconciled, the whole thing is\nimperative.\n\nUsers should use \"generateName\" to re-use the\n[…]\n NodeOpUpgrade immutable\n\nbecause they are also one-off things.\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Make OSArtifact an immutable resource (#76)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-03-18T09:39:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "26458c92baf2807ad7b9e7392157d8ffad98b6ff",
          "body": "* Fix --cloud-config flag ignored in ISO and UKI builds\n\nMove --cloud-config before the positional dir:/rootfs argument.\nurfave/cli ignores flags that appear after positional arguments.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n* test: add unit tests for --cloud-config flag order\n\n* test: stick the ginkgo/gomega conventions\n\n* chore: add the license back\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix --cloud-config flag ignored in ISO and UKI builds (#73)",
          "author_name": "Pilou",
          "author_login": "plmercereau",
          "committed_at": "2026-03-09T12:55:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d2505559d00b7be86eed33d8fd12ce31751e6fd0",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.0-beta2 (#70)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-05T13:05:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f79fdd960b2d05d16498871352985469fb5ded8",
          "body": "* Use image credentials for pulling images too\n\nWhether it is the image.ref, buildOptions.baseImage, \"FROM\" image in\nthe custom ociSpec or the tool image (auroraboot), they should all use\nthe image credentials.\n\nCredentials are still used for pushing, like before.\n\nSigned-off-by: Dimitris Karakasili\n[…]\n\n\n* Add e2e test to verify that creds are used for pulling only\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "3992 creds without pushing (#67)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-03-05T08:38:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fbe012dbf1b20c95775fa8dae6f3796246be3ac1",
          "body": "* Allow the user to specify build environment variables\n\nsuch as HTTP_PROXY et al\n\nPart of https://github.com/kairos-io/kairos/issues/3993\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Allow the user to specify CA certificates as a volume\n\nThose will be used by kaniko when pullin\n[…]\ned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "3993 build env + CA certs (#65)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-03-04T14:40:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "11d5b0d943d938e8c9e83c881d5b9b88e9646f19",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.1.0-beta1 (#64)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-03T15:12:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab9be79ac23cd12dfce2c4a677860291430f0732",
          "body": "* Osartifact new UX (#57)\n\n* Add ADR for new suggested OSArtifact UX with examples\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Change dockerfile building spec\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Update spec\n\nSigned-off-by: Dimitris Karakasilis <dim\n[…]\n-authored-by: GitHub Actions <github-actions@github.com>\nCo-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: jimmykarily <2794419+jimmykarily@users.noreply.github.com>",
          "is_bot": false,
          "headline": "V0.1.0 prep - New OSArtifact API",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-03-03T14:36:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f04bd143beddb5722e9f71803ce605fc1b2ba79",
          "body": "Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "go mod tidy",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-03-03T13:41:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "396cfc9f21c287d238238e4078c9a33b81c67ef7",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update kubernetes packages to v0.35.2 (#20)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T13:39:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "413f1faa9af8972b1cccdfbac53ac6ed5aa37668",
          "body": "* fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.1\n\n* go mod tidy\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Add back the toolchain directive\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Fix go.mod issues\n\nby bumping go to latest 1.25.X\n\n\n[…]\ned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": true,
          "headline": "fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.1 (#32)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T13:37:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab7077f959ad4aff5e607fa9e06dfcbf10168d31",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/onsi/gomega to v1.39.1 (#21)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T11:44:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49fe74a93dbcf965f8623ac9e69e5eff20f9ebb7",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update docker.io/golang docker tag to v1.26 (#27)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T11:43:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cdec3446788d3e165d17d43d6109edc1b94c39e",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/onsi/ginkgo/v2 to v2.28.1 (#28)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T11:43:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "467c23f664c301fa569347c9044800139f3a882a",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update quay.io/kairos/operator docker tag to v0.0.7 (#31)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T11:42:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea01d56998b68d612e8ab4b7434e07175ccb30e4",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go action to v6 (#33)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T11:37:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd6c4d5e9b1bd805d28b8c9191ac54ca2966a8aa",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout action to v6 (#36)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T11:36:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1922d812a9eaf4b064f96e4a498213a344898e2c",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update azure/setup-kubectl action to v4 (#38)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-03T11:36:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7e9fa74a31e74d358122f10d1d165b5fc88b8d0",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.0.7 (#56)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-25T06:09:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13111ea2a8370b7dde8aafd14a29010d0c6f455a",
          "body": null,
          "is_bot": false,
          "headline": "Fix more linting issues",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-02-19T07:24:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5160f0efef865a245e9cd13773091b9176dc8752",
          "body": null,
          "is_bot": false,
          "headline": "Fix linter issues",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-02-19T06:37:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a35b87cc7e21fad694407e039308ece24e2bcbce",
          "body": "* fix: use single equals for sh string comparison in upgrade command\n\n* chore: remove shebang",
          "is_bot": false,
          "headline": "Fix string comparison in upgrade command (#53)",
          "author_name": "Willem Gillis",
          "author_login": "Polygens",
          "committed_at": "2026-02-19T06:13:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67b5b34d3bac9ed06fdc08f5f8f5a32a698bd2e8",
          "body": null,
          "is_bot": false,
          "headline": "fix: update kubectl download URL to support multiple architectures (#54)",
          "author_name": "Willem Gillis",
          "author_login": "Polygens",
          "committed_at": "2026-02-19T06:12:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "556caf6767be54e941d2fc200e8b04b5f404bcbd",
          "body": "Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Cleanup duplicated docs and link to the official docs site (#52)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-02-18T14:40:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dec79f7c96f0d69fb40384df3c0a0b31299fd81",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.0.6 (#51)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-17T10:48:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34f54e3b6f1877db6ede162a9ef5bc67f328bd4d",
          "body": "…(#50)\n\n* Add Volumes, Importers, and VolumeBindings fields to OSArtifact CRD\n\nIntroduce the CRD type changes needed for user-defined volumes and\nimporter init containers. Add a VolumeBindings struct that maps volume\nnames to build roles (buildContext, overlayISO, overlayRootfs). Add\nValidate() to e\n[…]\ned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": " Add Volumes, Importers, and VolumeBindings fields to OSArtifact CRD …",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-02-17T09:59:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "781eaa00d454d2cff34df6666844ca2ff1b96335",
          "body": "* Introduce methods for dockerfile templating\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Render the templated dockerfile\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Allow templating using a referenced ConfigMap\n\nSigned-off-by: Dimitris Karakasilis <dimitr\n[…]\nby: Copilot <175728472+Copilot@users.noreply.github.com>\nCo-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: jimmykarily <2794419+jimmykarily@users.noreply.github.com>",
          "is_bot": false,
          "headline": "3929 add dockerfile templating (#46)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-02-13T10:00:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a3e73bbc19ce4de8e396581271adaf1500976eed",
          "body": "* Document the use of the nginx kustomization\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n* Fix failing multi-stage builds with kaniko\n\nKaniko tries to delete a file that is bound mounted in kubernetes or\nsomething and it fails.\n\nAlso add an example of a kaniko build\n\nSigned-off-\n[…]\nhe proper way\n\nEXTEND env variable is long gone from Auroraboot\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>\n\n---------\n\nSigned-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>",
          "is_bot": false,
          "headline": "Various fixes (#45)",
          "author_name": "Dimitris Karakasilis",
          "author_login": "jimmykarily",
          "committed_at": "2026-02-12T08:29:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5f2550ef9860d11e6bf18630bf8534363d363bd7",
          "body": "Co-authored-by: GitHub Actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "chore: bump version to v0.0.5 (#44)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-27T13:14:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 24,
      "commits_last_year": 109,
      "latest_release_at": "2026-07-28T06:23:19Z",
      "latest_release_tag": "v0.1.2",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 20,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 16.1
    },
    "artifacts": {
      "collected": true,
      "structure": [
        "tree.dockerfile",
        "tree.go_importable",
        "tree.go_main"
      ],
      "declarations": []
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "readme_badges": {
        "hosts": [
          "github.com"
        ],
        "total": 1,
        "header": 1,
        "collected": true,
        "has_inspect_badge": false
      },
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/kairos-io/kairos-operator",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/kairos-io/kairos-operator",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "v0.1.2",
          "repository_url": "https://github.com/kairos-io/kairos-operator",
          "versions_count": 24,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-28T06:22:20Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        }
      ]
    },
    "popularity": {
      "forks": 9,
      "stars": 8,
      "watchers": 2,
      "fork_history": {
        "days": [
          {
            "date": "2025-10-15",
            "count": 1
          },
          {
            "date": "2026-02-17",
            "count": 1
          },
          {
            "date": "2026-03-07",
            "count": 1
          },
          {
            "date": "2026-04-01",
            "count": 1
          },
          {
            "date": "2026-04-07",
            "count": 1
          },
          {
            "date": "2026-06-17",
            "count": 1
          },
          {
            "date": "2026-07-08",
            "count": 1
          },
          {
            "date": "2026-07-09",
            "count": 1
          },
          {
            "date": "2026-07-20",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 9,
        "total_forks": 9
      },
      "star_history": null,
      "open_issues_and_prs": 8
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples",
        "samples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": true,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 126092,
      "source_files_sampled": 43,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 2,
            "oldest_advisory_days": 14
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.40.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7,
            "advisory_ids": [
              "GHSA-hfvc-g4fc-pqhx",
              "GO-2026-5426"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 2,
            "oldest_advisory_days": 118
          },
          {
            "name": "github.com/google/cel-go",
            "direct": false,
            "version": "v0.26.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-gcjh-h69q-9w9g"
            ],
            "fixed_version": "0.29.0",
            "advisory_count": 1,
            "oldest_advisory_days": 11
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.41.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5158"
            ],
            "fixed_version": "1.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 11
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 21
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1,
          "unknown": 2,
          "critical": 1,
          "moderate": 1
        },
        "advisory_count": 7,
        "affected_count": 5,
        "assessed_count": 92,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "al.essio.dev/pkg/shellescape",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/onsi/ginkgo/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.32.0"
        },
        {
          "name": "github.com/onsi/gomega",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.1"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.1"
        },
        {
          "name": "sigs.k8s.io/yaml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "al.essio.dev/pkg/shellescape",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo/v2",
            "direct": true,
            "version": "v2.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.24.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antlr4-go/antlr/v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-task/slim-sprig/v3",
            "direct": false,
            "version": "v3.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/cel-go",
            "direct": false,
            "version": "v0.26.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20260402051712-545e8a4df936",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.27.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.19.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stoewer/go-strcase",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.65.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.1",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20251219203646-944ab1f22d93",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260128011058-8636f8732409",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260128011058-8636f8732409",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260317180543-43fb72c5454a",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/streaming",
            "direct": false,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20260210185600-b8788abfbbc2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/apiserver-network-proxy/konnectivity-client",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.3",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 92,
        "direct_count": 8,
        "indirect_count": 84
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 4,
        "merged_prs": 125,
        "open_issues": 4,
        "closed_ratio": 0.636,
        "closed_issues": 7,
        "closed_unmerged_prs": 14
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "jimmykarily",
          "commits": 95,
          "avatar_url": "https://avatars.githubusercontent.com/u/2794419?v=4"
        },
        {
          "type": "User",
          "login": "thebhdn",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/96438564?v=4"
        },
        {
          "type": "User",
          "login": "Polygens",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/3582318?v=4"
        },
        {
          "type": "User",
          "login": "prometherion",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/9697646?v=4"
        },
        {
          "type": "User",
          "login": "mauromorales",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/433958?v=4"
        },
        {
          "type": "User",
          "login": "plmercereau",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/24897252?v=4"
        },
        {
          "type": "User",
          "login": "RodrigoDLPontes",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/11012066?v=4"
        },
        {
          "type": "User",
          "login": "smasset-orange",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/86793256?v=4"
        }
      ],
      "contributors_sampled": 8,
      "top_contributor_share": 0.905
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "lint.yml",
        "release-orchestrator.yml",
        "release.yml",
        "test-e2e.yml",
        "test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "26 out of 28 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 7,
            "reason": "Found 5/7 approved changesets -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 3 contributing companies or organizations -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "internal error: internal error: invalid Dockerfile",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "8338731801be8ddccaee740f53420189dbc0ff78",
        "ran_at": "2026-08-05T09:33:41Z",
        "aggregate_score": 6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "recent_prs": {
        "merged_7d": 1,
        "decided_7d": 1,
        "merged_30d": 5,
        "authors_30d": 3,
        "decided_30d": 6,
        "sample_size": 60,
        "window_days": 30,
        "sample_exhausted": false,
        "authors_probed_30d": 3,
        "newcomer_merged_30d": 3,
        "bot_prs_excluded_30d": 13,
        "newcomer_authors_30d": 1,
        "newcomer_decided_30d": 3
      },
      "ci_last_run_at": "2026-08-03T10:18:05Z",
      "oldest_open_prs": [
        {
          "number": 137,
          "created_at": "2026-07-08T20:49:01Z",
          "last_comment_at": "2026-08-03T09:01:55Z",
          "last_comment_author": "mudler-agent"
        },
        {
          "number": 153,
          "created_at": "2026-07-28T10:50:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 155,
          "created_at": "2026-08-03T14:20:55Z",
          "last_comment_at": "2026-08-04T06:42:56Z",
          "last_comment_author": "thebhdn"
        },
        {
          "number": 156,
          "created_at": "2026-08-05T05:47:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-08-03T09:43:15Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 41,
          "created_at": "2023-08-10T21:18:55Z",
          "last_comment_at": "2026-08-03T11:15:17Z",
          "last_comment_author": "thebhdn"
        },
        {
          "number": 40,
          "created_at": "2025-01-14T22:13:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 5,
          "created_at": "2025-05-28T05:59:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 85,
          "created_at": "2026-04-02T14:51:10Z",
          "last_comment_at": "2026-07-27T12:20:29Z",
          "last_comment_author": "jimmykarily"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/kairos-io/kairos-operator",
    "host": "github.com",
    "name": "kairos-operator",
    "owner": "kairos-io"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 65 is calibrated to 75 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 65,
            "calibrated": 75,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 75,
      "inputs": {
        "security": 68,
        "vitality": 87,
        "community": 35,
        "governance": 65,
        "calibration": "2026-08-02",
        "engineering": 61,
        "ai_readiness": 73,
        "weighted_overall_raw": 65
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 87,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "commits_last_year": 109,
              "human_commit_share": 0.4,
              "days_since_last_push": 0,
              "active_weeks_last_year": 20
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "20/52 weeks with commits",
                "points": 13.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 20
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "109 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 109
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 24,
              "latest_release_tag": "v0.1.2",
              "releases_from_tags": false,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 16.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "24 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~16.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 16.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "weak",
        "name": "Community & Adoption",
        "value": 35,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 21,
            "inputs": {
              "forks": 9,
              "stars": 8,
              "watchers": 2,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "8 stars",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "9 forks",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "2 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": 1,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [
                "github.com"
              ],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 65,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 32,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 8,
              "top_contributor_share": 0.905
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 90% of commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 90
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "8 contributors",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "merged_prs": 125,
              "open_issues": 4,
              "closed_issues": 7,
              "prs_merged_7d": 1,
              "prs_decided_7d": 1,
              "prs_merged_30d": 5,
              "prs_decided_30d": 6,
              "issue_closed_ratio": 0.636,
              "closed_unmerged_prs": 14,
              "first_time_authors_30d": 1,
              "first_time_prs_merged_30d": 3,
              "first_time_prs_decided_30d": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "64% of issues closed",
                "points": 26.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 64
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "125/139 decided PRs merged",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 125,
                      "decided": 139
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "3/3 first-time contributors' PRs merged in 30d",
                "points": 13,
                "status": "met",
                "details": [
                  {
                    "code": "newcomer_prs_merged",
                    "params": {
                      "days": 30,
                      "merged": 3,
                      "decided": 3
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 5/7 approved changesets -- score normalized to 7",
                "points": 10.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "followers": 149,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "kairos-io",
              "public_repos": 57,
              "account_age_days": 1434
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "149 followers of kairos-io",
                "points": 15.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 149,
                      "login": "kairos-io"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "57 public repos, account ~3 yr old",
                "points": 20.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 57
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 3
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/kairos-io/kairos-operator"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "24 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 61,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "26 out of 28 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 30,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 68,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Pinned-Dependencies, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "26 out of 28 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 5/7 approved changesets -- score normalized to 7",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "internal error: internal error: invalid Dockerfile",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 92 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 92
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 7,
              "affected_packages": 5,
              "assessed_packages": 92,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 1, moderate 1, unknown 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 92,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 13
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 73,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.875,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "35 of 40 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 35,
                      "sampled": 40
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "exceptional",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": true,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.11,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.49
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "devcontainer, Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "devcontainer, Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "11 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 11,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "49 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 49,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "internal error: internal error: invalid Dockerfile",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 126092,
              "source_files_sampled": 43,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/43 source files over 60KB",
                "points": 53.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 43,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "weak",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples",
                "samples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples, samples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples, samples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library",
        "application"
      ],
      "labels": [
        "library",
        "application"
      ],
      "scores": {
        "library": 6,
        "application": 5
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "structure",
          "label": "application",
          "source": "tree.go_main",
          "weight": 5
        },
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:go",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "library",
          "source": "tree.go_importable",
          "weight": 3
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-05T09:34:01.714613Z",
  "schema_version": "0.31.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/kairos-io/kairos-operator.svg",
  "full_name": "kairos-io/kairos-operator",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.31.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsGo.