Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 06:12 UTC
olsajiri / tetragon
eBPF-based Security Observability and Runtime Enforcement
olsajiri/tetragon holds a health index of 38 out of 100, placing it in the At risk band. It scores highest on AI Readiness (68/100) and lowest on Community & Adoption (12/100). It was last updated 2 days ago. 3 contributors account for most of its recent work.
38
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
38
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
olsajiriPersonal account
40 followers16 public repossince Aug 2018
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/cilium/tetragonpoints to another repo — not scored | v1.7.0 | - | 45 | 87 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
34
Development activity
36At risk
How it's scored
| 36/36 | Push recency — last push 2 days ago |
| 0/36 | Commit cadence — 0/52 weeks with commits |
| 0/18 | Commit volume — 0 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 0 |
| human_commit_share | 1 |
| days_since_last_push | 2 |
| active_weeks_last_year | 0 |
Release discipline
32At risk
How it's scored
| 16.2/27 | Ships releases — 1 version tags (no GitHub releases) |
| 0/36 | Release recency — latest release 1,534 days ago |
| 12.6/27 | Release cadence — cadence unknown (single release) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 1 |
| latest_release_tag | v0.8.0 |
| releases_from_tags | yes |
| days_since_latest_release | 1,534 |
| mean_days_between_releases | — |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
12
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 0/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
43
Maintainer resilience (bus factor)
69Moderate
How it's scored
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 16.2/22.5 | Commit distribution — top contributor authored 28% of commits |
| 13.5/13.5 | Contributor breadth — 14 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 3 |
| contributors_sampled | 14 |
| top_contributor_share | 0.28 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
53Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 11.6/25 | Owner reach — 40 followers of olsajiri |
| 21/25 | Track record — 16 public repos, account ~7 yr old |
Inputs used
| followers | 40 |
| owner_type | User |
| is_verified | — |
| owner_login | olsajiri |
| public_repos | 16 |
| account_age_days | 2,887 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Engineering Quality
Are baseline engineering and documentation practices in place?
63
Engineering practices
88Excellent
How it's scored
| 24/24 | CI workflows — 8 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yaml, .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 6.4/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | yes |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
25Critical
How it's scored
| 0/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | no |
| has_docs_dir | yes |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
37
Security posture
37At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 2.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 77 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.7 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
68
Agent context & guidance
36At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 36.3/40 | Legible commit history — 34 of 50 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.68 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile, api/Makefile, bpf/Makefile, contrib/tester-progs/Makefile, vendor/github.com/cilium/ebpf/Makefile, vendor/github.com/emicklei/go-restful/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/hashicorp/hcl/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/pelletier/go-toml/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cast/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/spf13/viper/Makefile, vendor/github.com/vishvananda/netlink/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/gopkg.in/ini.v1/Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yaml, .golangci.yml |
| 11/11 | Static type checking — C (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 50 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 5/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile, api/Makefile, bpf/Makefile, contrib/tester-progs/Makefile, vendor/github.com/cilium/ebpf/Makefile, vendor/github.com/emicklei/go-restful/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/hashicorp/hcl/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/pelletier/go-toml/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cast/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/spf13/viper/Makefile, vendor/github.com/vishvananda/netlink/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/gopkg.in/ini.v1/Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — C (statically typed) |
| 54.4/55 | Manageable file sizes — 3/263 source files over 60KB |
Inputs used
| primary_language | C |
| largest_source_bytes | 1,769,631 |
| source_files_sampled | 263 |
| oversized_source_files | 3 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — api/v1/tetragon/tetragon.proto, vendor/github.com/cilium/hubble/api/v1/flow/flow.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | api/v1/tetragon/tetragon.proto, vendor/github.com/cilium/hubble/api/v1/flow/flow.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto |
Key facts
0GitHub stars
14contributors
0commits, last 12 months
2days since last push
1releases
3bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- Community profile unavailable
- go package 'github.com/cilium/tetragon' points at a different repository (https://github.com/cilium/tetragon); excluded from ecosystem scoring
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.7 / 10
3.7aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | internal error: Client.Actions.ListWorkflowRunsByFileName: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/olsajiri/tetragon/actions/workflows/build-images-ci.yml/runs?status=success: 404 Not Found [] |
| 5 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 5 |
| 10 | SAST | SAST tool detected: CodeQL |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 77 existing vulnerabilities detected |
Direct dependencies 30
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/blang/semver | v3.5.1+incompatible | go.mod |
| Go | github.com/cilium/cilium | v1.9.15 | go.mod |
| Go | github.com/cilium/ebpf | v0.8.1-0.20220125132352-732bf912e846 | go.mod |
| Go | github.com/cilium/hubble | v0.5.3-0.20220311154618-3e44df066567 | go.mod |
| Go | github.com/cilium/lumberjack/v2 | v2.2.2 | go.mod |
| Go | github.com/fatih/color | v1.7.0 | go.mod |
| Go | github.com/google/go-cmp | v0.5.6 | go.mod |
| Go | github.com/google/gops | v0.3.14 | go.mod |
| Go | github.com/hashicorp/golang-lru | v0.5.4 | go.mod |
| Go | github.com/iancoleman/strcase | v0.2.0 | go.mod |
| Go | github.com/kballard/go-shellquote | v0.0.0-20180428030007-95032a82bc51 | go.mod |
| Go | github.com/prometheus/client_golang | v1.11.0 | go.mod |
| Go | github.com/sirupsen/logrus | v1.8.1 | go.mod |
| Go | github.com/spf13/cobra | v1.1.3 | go.mod |
| Go | github.com/spf13/viper | v1.7.0 | go.mod |
| Go | github.com/stretchr/testify | v1.7.0 | go.mod |
| Go | github.com/vishvananda/netlink | v1.1.1-0.20210330154013-f5de75959ad5 | go.mod |
| Go | github.com/yalue/native_endian | v1.0.1 | go.mod |
| Go | golang.org/x/sync | v0.0.0-20210220032951-036812b2e83c | go.mod |
| Go | golang.org/x/sys | v0.0.0-20211216021012-1d35b9e2eb4e | go.mod |
| Go | golang.org/x/time | v0.0.0-20210723032227-1f47c861a9ac | go.mod |
| Go | google.golang.org/grpc | v1.44.0 | go.mod |
| Go | google.golang.org/protobuf | v1.28.0 | go.mod |
| Go | k8s.io/api | v0.22.5 | go.mod |
| Go | k8s.io/apiextensions-apiserver | v0.22.5 | go.mod |
| Go | k8s.io/apimachinery | v0.22.5 | go.mod |
| Go | k8s.io/client-go | v0.22.5 | go.mod |
| Go | k8s.io/code-generator | v0.22.5 | go.mod |
| Go | sigs.k8s.io/controller-tools | v0.4.1 | go.mod |
| Go | sigs.k8s.io/yaml | v1.2.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 86050,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 1995825,
"Go": 854629,
"Shell": 4153,
"Smarty": 4760,
"Makefile": 12250,
"Dockerfile": 5935
},
"pushed_at": "2026-07-23T18:48:38Z",
"created_at": "2022-05-22T16:20:38Z",
"owner_type": "User",
"updated_at": "2022-05-22T15:44:12Z",
"description": "eBPF-based Security Observability and Runtime Enforcement",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "C",
"significant_languages": [
"C",
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "olsajiri",
"company": null,
"location": null,
"followers": 40,
"avatar_url": "https://avatars.githubusercontent.com/u/42811547?v=4",
"created_at": "2018-08-29T15:32:04Z",
"is_verified": null,
"public_repos": 16,
"account_age_days": 2887
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2022-05-13T16:54:09Z"
}
],
"recent_commits": [
{
"oid": "70ced463af7e6608dd0d48a1e563186b1f470f96",
"body": "Currently, the installation instructions for the binary release of the\ntetragon-cli hard-code GOOS=linux and GOARCH=386, but the tool is\nprovided for other platforms. Update the installation instructions\naccordingly and also add commands to check the provided `.sha256sum`\nfile.\n\nSigned-off-by: Tobias Klauser <tobias@cilium.io>",
"is_bot": false,
"headline": "README: fix tetragon-cli installation instructions",
"author_name": "Tobias Klauser",
"author_login": "tklauser",
"committed_at": "2022-05-20T16:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d7ba3cbe78791b916797b25ff626d76877734d1",
"body": "Signed-off-by: Doğukan ÇELİK <dogukan.celik@itu.edu.tr>",
"is_bot": false,
"headline": "Add LICENSE",
"author_name": "Doğukan ÇELİK",
"author_login": "dgkncelik",
"committed_at": "2022-05-20T06:51:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6083f8b1bb63d35355d44d7886a6cd55e31b15fc",
"body": "This patch makes the gRPC address and port configurable in helm and adds a similar option\nto configure the metrics address.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "helm: make gRPC and metrics address/port configurable",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-19T16:44:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9951b47c7d98aa27c7f05c059f3bc182c4bca5c1",
"body": "[commit: 5da009260577a08e33f832b3b2a82413c797c26d]\n\nSigned-off-by: Anastasios Papagiannis <tasos.papagiannnis@gmail.com>\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "Add test for CopyFD",
"author_name": "Anastasios Papagiannis",
"author_login": "tpapagian",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd73ce23136efa1a947685e2645a4a8dad3fff9e",
"body": "Before that we use fd_install to track the correlation of file names\nwith file descriptors. This captures calls of open* syscalls. dup\nsyscall also use the same mechanism.\n\ndup2 and dup3 syscalls use a different way to do that. This commit\nintroduces CopyFD as a complementary action to FollowFD to b\n[…]\n\n argName: 1\n\n[commit: ebe3c49b4884d0037a09c18a74c5390f3885f3c4]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>\nSigned-off-by: Anastasios Papagiannis <tasos.papagiannnis@gmail.com>",
"is_bot": false,
"headline": "Introduce CopyFD to capture file descriptors from dup* syscalls",
"author_name": "Anastasios Papagiannis",
"author_login": "tpapagian",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7e78c909e2d11c832252c5f6e989df2829569f80",
"body": "The \"binary\" field has at max MAXARGLENGTH size. Until now this is\n100. Let's increase that to 256.\n\n[commit: 382eaa827abc39f346106dcfea596c7724e4afbc]\n\nSigned-off-by: Anastasios Papagiannis <tasos.papagiannnis@gmail.com>\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "Increase binary length in process events",
"author_name": "Anastasios Papagiannis",
"author_login": "tpapagian",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f39f4feefdb3ac3fd95b1b86df4112bebcbea763",
"body": "Signed-off-by: Kornilios Kourtis <kornilios@isovalent.com>\n\n[commit: 24f2f2dcaab09c0d23352b8954cc851bb8879c14]",
"is_bot": false,
"headline": "sensors/exec/exec_test: fix default fgsLib",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c2591e060464a89d3faea55d4ed5e97c1837dbb",
"body": "Start the observer so that we actually do the test.\n\nNote: The fork-tester test program issues a connect event. The test, however,\ndoes not use the connect event, and instead uses an exit event and tests\nthat the proper PIDs (as retrieved from fork-tester) match. The reason\nfor not using the connect\n[…]\no verified manually that reverting the \"introduce a clone event\"\npatch, breaks the test.\n\n[commit: 2ed42b90e94cf9cde7cff16e608dd4ebc4a0927e]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "TestFork: actually implement the test",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0cc756c20ef962f1dda742158bca4f650ba9d704",
"body": "Introduce a test that tests that tetragon properly handles events that\ncome from processes that fork() but do not exec().\n\nThis patch just introduces the code that spawns the fork-tester program,\nand parses its output. It does not start the agent to test that events\nare properly created. See subsequent patch for that.\n\n[commit: 072a24de7225fdb80080222e5e5ffb1132d5c457]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "TestFork: initial code for the fork test",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b488053ecc20379c76045cea1faa7f5af37e886d",
"body": "[commit: aec91672d139cb0d3a2a030db76acf8365836ecd]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "eventchecker: add ProcessWithPID helper",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45d87271700f5af0ae2b7058b82bc129428dedfb",
"body": "Add a helper for parsing output of commands, but also logging in using\nt.Log().\n\n[commit: ae8050a6d350fe292eff4594be896f332f3b24f7]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "testutils/cmd: add ParseAndLogCmdOutput helper",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee6bc59e76523a4710e124225545d838272bc7da",
"body": "To be used by later commits.\n\n[commit: 8536cd9e2a78b7df276ced0e7230a7c5a7719ef0]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "testutils: add a ContribPath helper",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "215c949123625a49132fb761a3ec94a2f8887f7c",
"body": "As discussed in a previous commit, processes that do not fork() might end\nup with wrong information.\n\nThis patch introduces a CLONE event. The purpose of this event is to\nallow the agent to have proper process information for new processes\n(i.e., ones created with fork()) that to do not call execve(\n[…]\ndestination_port\": 53,\n \"protocol\": \"TCP\"\n },\n \"time\": \"2022-05-05T10:52:23.798Z\"\n}\n\n[commit: c0417f5b895d66f137de5244fba44e358cc94df2]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "introduce a clone event",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d0cc5f6c6267723eba7bbb514791f3bac7813c2",
"body": "This is in preparation for a subsequent commit that will add another\ntype of event to the cache.\n\n[commit: 7c5872410f94d27e02df048a34137bf5d7e5cf5a]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "grpc/process: rename Add to AddExecEvent",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53fa34688e07c91940fd80601be58ea8e9e98ce8",
"body": "Preparation patch for subsequent changes.\n\n[commit: 3e1419eed29668e2a63d02d816a513c252359586]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "bpf: event_wake_up_new_task: rename value to curr",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d6544cd5d6f6f7eedd801c501a953124464f004",
"body": "factor out __event_find_parent from event_find_parent.\n__event_find_parent is to be used in a subsequent patch.\n\n[commit: d966aaa66d19ac3d436062e901cb945418b56903]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "bpf: create __event_find_parent",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53ad9cef41fb0b52d783625513919416c62d0b1d",
"body": "We load the current pid, only to be overwritten in the loop.\nRemove the unnecessary load.\n\n[commit: 92965888fdf66b9ac39dda3e9355bf73e8989874]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "bpf: remove unused load",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50e4645e5e927e41ce10991e9c99b98e96853d89",
"body": "Add a fork-tester program to illustrate issues for processes that fork()\nbut do not exec().\n\nFor these cases, we do not have process information because this is\ncreated in the exec event.\n\nSo far, we seem to handle these cases by iterating the process tree and\nfinding the parent of the process (see \n[…]\n81Z\"\n}\n\nThis commit just illustrates the issue. Upcoming patches will attempt\nto fix it.\n\n[commit: 879e179b224e15f25ac3b7c692d81d2c2a2dfab1]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "contrib/tester-progs: fork-tester",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0b11cef99009b084364b96d7f81922c3a8bbfab6",
"body": "We have a lot of different C programs under contrib/. Move them all to\na single directory.\n\n[commit: 10b6e9dd1b2f622bbca97edd20e91ac608eb6f9b]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "contrib: move C test progs in tester-progs",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61731ca790d982b095dc9eee0574b6d24ca703d6",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "remove -static flag breaking RHEL8 build",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-19T09:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76c33ab589158c050175c5815dfa8f1fd038be95",
"body": "This commit silences \"read error!\" messages when exec id read fails, hides them behind\na debug flag, and adds a metric to count such errors.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "process: silence \"read error\" prints + add metric",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-18T23:31:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19125a816073a43281d3f95c2c98706a26047503",
"body": "The event merge warnings were overly verbose and flooding the logs with useless\ninformation. Silence these warnings by putting them behind a debug flag and add a metric\nto help track such errors. This patch is loosely based on a previous version by Jiri but\nwith some additional information in the me\n[…]\n_merge_errors{curr_fn=\"__x64_sys_read\",curr_type=\"enter\",prev_fn=\"__x64_sys_read\",prev_type=\"enter\"} 6\n\nSigned-off-by: William Findlay <will@isovalent.com>\nCo-authored-by: Jiri Olsa <jolsa@kernel.org>",
"is_bot": false,
"headline": "kprobe: silence event merge warnings + add metric",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-18T23:31:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f08d6bac3df22569b7bb280cbab752405f1a9773",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "fix default DOCKER_DEV_ACCOUNT",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-18T22:56:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52691b1c84dfbb8234274c3dd4893e7be742f3c7",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "use CONTAINER_ENGINE var instead of literal 'docker'",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-18T22:55:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d4e5a8fd38dfd97a673b966f38e097b01ba2d39",
"body": "Signed-off-by: Marwan Nour <38836519+MarwanNour@users.noreply.github.com>",
"is_bot": false,
"headline": "Added note for logging multiple tetragon pods",
"author_name": "Marwan Nour",
"author_login": "MarwanNour",
"committed_at": "2022-05-18T17:17:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94a202a91f430c5c95dc700e307f56a89d646dbe",
"body": "Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "README: Add GKE support",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-17T21:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5606b0a562e88f5c91fac81c119edf537bd90da7",
"body": "This patch adds section describing how to make changes to your\ntetragon repo fork.\n\nSigned-off-by: Djalal Harouni <djalal@cilium.io>",
"is_bot": false,
"headline": "doc: add making changes section to development guide",
"author_name": "Djalal Harouni",
"author_login": "tixxdz",
"committed_at": "2022-05-17T16:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f94b951c2708628adfd082b549999d344632129b",
"body": "… guide\n\nInclude the DEVELOP.md file directly into the Development Guide to make\nit simple for developers.\n\nSigned-off-by: Djalal Harouni <djalal@cilium.io>",
"is_bot": false,
"headline": "doc: include the build and run Tetragon directly into the Development…",
"author_name": "Djalal Harouni",
"author_login": "tixxdz",
"committed_at": "2022-05-17T16:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5c10ffa23c6c9095a9e0a25b472e170da753657",
"body": "Tetragon Open Source project was just released and it does not include\ndefault contributing guidelines.\n\nThis patch fixes this by adding:\n\n1. CONTRIBUTING.md file in the root directory as suggested by github documentation:\nhttps://docs.github.com/en/communities/setting-up-your-project-for-healthy-co\n[…]\nh a section on how to submit pull requests.\n\n3. Moves the DEVELOP.md file from root directory to the `docs/contributing/development/` one.\n\nFixes: #33\n\nSigned-off-by: Djalal Harouni <djalal@cilium.io>",
"is_bot": false,
"headline": "doc: add contribution guideline and how to submit pull requests",
"author_name": "Djalal Harouni",
"author_login": "tixxdz",
"committed_at": "2022-05-17T16:38:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3686d269046b31c060ef7eb8700956d22bbea269",
"body": "Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>",
"is_bot": false,
"headline": "Fixed README command example",
"author_name": "ekoops",
"author_login": "ekoops",
"committed_at": "2022-05-17T15:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "540e2ec3b967d618601b7895a577a011355a475f",
"body": "This is mainly to check commits are signed off, among other things.\n\nSample failure output: https://github.com/cilium/tetragon/runs/6462531785?check_suite_focus=true\n\nSigned-off-by: Michi Mutsuzaki <michi@isovalent.com>\nCo-authored-by: Joe Stringer <joe@cilium.io>",
"is_bot": false,
"headline": "static-check: Run checkpatch.pl",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-17T02:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7efafa3accda668a70efe79633dc359b537f0bd",
"body": "This commit makes a few changes to clean up and streamline code generation, moving main\ncode generation logic into a package and factoring out hard-coded constants in favour of\nvalues we can easily update as needed.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "codegen: clean up codegen package",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-17T01:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73bf2c4c8d5973c1c00cf0d26b39c61b00de30b4",
"body": "Signed-off-by: Kornilios Kourtis <kornilios@gmail.com>",
"is_bot": false,
"headline": "DEVELOP.md: list requirements",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-16T18:22:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35e4b8b64ae08c00fd8285df6078fe468b39a627",
"body": "This counter is useful to help debug cases where process exec events are missing a parent.\nUsing the parent exec ID in the metric, we can determine the corresponding pid and cross\ncheck against Tetragon event logs. This can help establish patterns and determine an\nunderlying root cause.\n\nAs a practical example, this counter recently helped me diagnose the underlying cause of\nmissing parents in kind deployments.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "metrics: add a per-exec-id counter for missing parents",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-16T18:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b30403eb117daa3e124d110e9138a58032e18e6",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "Vagrantfile: install libcap-dev for Makefile",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-16T17:04:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c760719a351518ae9e2a9dcc378b871a079b711",
"body": "Rename tcp_connect/tcp_sendmsg/tcp_close to connect/sendmsg/close to\nalign them with other events, and change their emojis to make them look\nslightly more interesting.\n\nSigned-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "encoder: Update TCP event format",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-16T00:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7f1c71aea559c8b22e331aa1ea9bdd078a53dd3",
"body": "We were parsing a 64-bit integer here and converting to a u32 without a bounds check. This\nis obviously wrong, so drop the bit size on the ParseInt call down to 32 and make it\nParseUint. Additionally, split up signed and unsigned cases in parseMatchValues() so that\nwe can properly parse the signed/unsigned integer types.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "selectors: fix missing bounds check on int conversion",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-15T17:40:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "318ff419f65af1bc5767a77f1980ab86b58b3fcf",
"body": "This PR introduces contrib/localdev and adds two helper scripts to make it easy to\nbootstrap a new kind cluster and install the desired version of Tetragon into that\ncluster.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "workflow: add kind scripts to contrib/localdev",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-14T03:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d30be582a54608d7caccde35bdcbe211cbbe137",
"body": "This is needed to make helm work with a local operator image.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "helm: add imagePullPolicy to operator container",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-14T03:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43d1f5cffccde57c6b846b2e9ebb905416fa9d5b",
"body": "Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "Use quay.io/cilium/hubble-export-stdout",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-13T23:34:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96ebb3a214635dadfe61ff94e80549af6c1515ea",
"body": "Signed-off-by: Joe Stringer <joe@cilium.io>",
"is_bot": false,
"headline": "Add CodeQL analysis",
"author_name": "Joe Stringer",
"author_login": "joestringer",
"committed_at": "2022-05-13T18:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced4528d96efde3b524c1dd47a29278ad9c4b52f",
"body": "Signed-off-by: Joe Stringer <joe@cilium.io>",
"is_bot": false,
"headline": "Create SECURITY.md",
"author_name": "Joe Stringer",
"author_login": "joestringer",
"committed_at": "2022-05-13T18:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a1fadbdd501bb0eec02387f72d5339a5bc93482",
"body": "Issue 1: the xwing pod uses busybox whoami which doesn't support --version, making the\nexit code wrong. To fix this let's just remove the --version argument.\n\nIssue 2: Grammar fix in examples.\n\nIssue 3: \"Incorrectly read, malicious altered\" -> \"Incorrectly read, maliciously altered\"\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "readme: fix minor issues in quickstart",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-13T17:53:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75e49ab97e6b44cc5cfe5c522904c629adcfc4bb",
"body": "Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "Prepare for release v0.8.0",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-13T16:54:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "931b70f2c9878ba985ba6b589827bea17da6ec33",
"body": "Cilium developers are happy to contribute Tetragon, Cilium's new component\nenabling powerful, eBPF-based Security Observability and Runtime\nEnforcement.\n\nTetragon detects and is able to respond in real time to security-significant\nevents, such as\n\n* Process execution events\n* Changes to privileges a\n[…]\nhat security event detection can be configured in relation\nto individual workloads.\n\nFor more details and examples please see README.\n\nThanks!\n\nSigned-off-by: John Fastabend <john.fastabend@gmail.com>",
"is_bot": false,
"headline": "Tetragon: Cilium developers happily contribute Tetragon",
"author_name": "John Fastabend",
"author_login": "jrfastab",
"committed_at": "2022-05-13T15:54:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dad6e5d7da494f64abfcf4dc2f38d42de909e82a",
"body": "Initial readme",
"is_bot": false,
"headline": "Merge pull request #2 from cilium/readme",
"author_name": "Liz Rice",
"author_login": "lizrice",
"committed_at": "2022-04-14T16:42:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3618ec95ac660e8fd723f1d47331258bcaf6e39",
"body": null,
"is_bot": false,
"headline": "Initial readme",
"author_name": "Liz Rice",
"author_login": "lizrice",
"committed_at": "2022-04-14T14:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a959ad831f6ab107c249ac88a329248495cb217",
"body": "Security Observability with eBPF initial content",
"is_bot": false,
"headline": "Merge pull request #1 from cilium/initial_content",
"author_name": "Natalia Ivanko",
"author_login": "sharlns",
"committed_at": "2022-03-24T22:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d0fc78cd629e978ad3b82d7f68ddee18f2d2626",
"body": null,
"is_bot": false,
"headline": "Security Observability with eBPF initial content",
"author_name": "Natalia Reka Ivanko",
"author_login": "sharlns",
"committed_at": "2022-03-24T22:52:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec2df9bff86bb61b4d099d60f50634f1ee7f69a5",
"body": null,
"is_bot": false,
"headline": "first commit",
"author_name": "Natalia Reka Ivanko",
"author_login": "sharlns",
"committed_at": "2022-03-24T17:23:16Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 0,
"latest_release_at": "2022-05-13T16:54:09Z",
"latest_release_tag": "v0.8.0",
"releases_from_tags": true,
"days_since_last_push": 2,
"active_weeks_last_year": 0,
"days_since_latest_release": 1534,
"mean_days_between_releases": null
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/cilium/tetragon",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": false,
"registry_url": "https://pkg.go.dev/github.com/cilium/tetragon",
"is_deprecated": false,
"latest_version": "v1.7.0",
"repository_url": "https://github.com/cilium/tetragon",
"versions_count": 45,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-04-29T13:22:56Z",
"latest_version_yanked": null,
"days_since_latest_publish": 87
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"api/Makefile",
"bpf/Makefile",
"contrib/tester-progs/Makefile",
"vendor/github.com/cilium/ebpf/Makefile",
"vendor/github.com/emicklei/go-restful/Makefile",
"vendor/github.com/gobuffalo/flect/Makefile",
"vendor/github.com/gogo/protobuf/proto/Makefile",
"vendor/github.com/hashicorp/hcl/Makefile",
"vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
"vendor/github.com/pelletier/go-toml/Makefile",
"vendor/github.com/pkg/errors/Makefile",
"vendor/github.com/prometheus/procfs/Makefile",
"vendor/github.com/spf13/cast/Makefile",
"vendor/github.com/spf13/cobra/Makefile",
"vendor/github.com/spf13/viper/Makefile",
"vendor/github.com/vishvananda/netlink/Makefile",
"vendor/golang.org/x/net/http2/Makefile",
"vendor/google.golang.org/grpc/Makefile",
"vendor/gopkg.in/ini.v1/Makefile"
],
"api_schema_files": [
"api/v1/tetragon/tetragon.proto",
"vendor/github.com/cilium/hubble/api/v1/flow/flow.proto",
"vendor/github.com/googleapis/gnostic/extensions/extension.proto",
"vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto",
"vendor/google.golang.org/appengine/internal/base/api_base.proto",
"vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
"vendor/google.golang.org/appengine/internal/log/log_service.proto",
"vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
"vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto",
"vendor/k8s.io/api/admissionregistration/v1/generated.proto",
"vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
"vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
"vendor/k8s.io/api/apps/v1/generated.proto",
"vendor/k8s.io/api/apps/v1beta1/generated.proto",
"vendor/k8s.io/api/apps/v1beta2/generated.proto",
"vendor/k8s.io/api/authentication/v1/generated.proto",
"vendor/k8s.io/api/authentication/v1beta1/generated.proto",
"vendor/k8s.io/api/authorization/v1/generated.proto",
"vendor/k8s.io/api/authorization/v1beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta2/generated.proto",
"vendor/k8s.io/api/batch/v1/generated.proto",
"vendor/k8s.io/api/batch/v1beta1/generated.proto",
"vendor/k8s.io/api/certificates/v1/generated.proto",
"vendor/k8s.io/api/certificates/v1beta1/generated.proto",
"vendor/k8s.io/api/coordination/v1/generated.proto",
"vendor/k8s.io/api/coordination/v1beta1/generated.proto",
"vendor/k8s.io/api/core/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1beta1/generated.proto",
"vendor/k8s.io/api/events/v1/generated.proto",
"vendor/k8s.io/api/events/v1beta1/generated.proto",
"vendor/k8s.io/api/extensions/v1beta1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
"vendor/k8s.io/api/networking/v1/generated.proto",
"vendor/k8s.io/api/networking/v1beta1/generated.proto",
"vendor/k8s.io/api/node/v1/generated.proto",
"vendor/k8s.io/api/node/v1alpha1/generated.proto",
"vendor/k8s.io/api/node/v1beta1/generated.proto",
"vendor/k8s.io/api/policy/v1/generated.proto",
"vendor/k8s.io/api/policy/v1beta1/generated.proto",
"vendor/k8s.io/api/rbac/v1/generated.proto",
"vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
"vendor/k8s.io/api/rbac/v1beta1/generated.proto",
"vendor/k8s.io/api/scheduling/v1/generated.proto",
"vendor/k8s.io/api/scheduling/v1alpha1/generated.proto",
"vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
"vendor/k8s.io/api/storage/v1/generated.proto",
"vendor/k8s.io/api/storage/v1alpha1/generated.proto",
"vendor/k8s.io/api/storage/v1beta1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
"vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 1769631,
"source_files_sampled": 263,
"oversized_source_files": 3,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/blang/semver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.5.1+incompatible"
},
{
"name": "github.com/cilium/cilium",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.15"
},
{
"name": "github.com/cilium/ebpf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.1-0.20220125132352-732bf912e846"
},
{
"name": "github.com/cilium/hubble",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.3-0.20220311154618-3e44df066567"
},
{
"name": "github.com/cilium/lumberjack/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.2"
},
{
"name": "github.com/fatih/color",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.6"
},
{
"name": "github.com/google/gops",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.14"
},
{
"name": "github.com/hashicorp/golang-lru",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.4"
},
{
"name": "github.com/iancoleman/strcase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "github.com/kballard/go-shellquote",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20180428030007-95032a82bc51"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.1"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.3"
},
{
"name": "github.com/spf13/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/vishvananda/netlink",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1-0.20210330154013-f5de75959ad5"
},
{
"name": "github.com/yalue/native_endian",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.1"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210220032951-036812b2e83c"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20211216021012-1d35b9e2eb4e"
},
{
"name": "golang.org/x/time",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210723032227-1f47c861a9ac"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.28.0"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/apiextensions-apiserver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/code-generator",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "sigs.k8s.io/controller-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.1"
},
{
"name": "sigs.k8s.io/yaml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "kkourt",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/221481?v=4"
},
{
"type": "User",
"login": "willfindlay",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/24983811?v=4"
},
{
"type": "User",
"login": "michi-covalent",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/25494577?v=4"
},
{
"type": "User",
"login": "dmitris",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/31205?v=4"
},
{
"type": "User",
"login": "tpapagian",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/719302?v=4"
},
{
"type": "User",
"login": "tixxdz",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1549291?v=4"
},
{
"type": "User",
"login": "sharlns",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/70883409?v=4"
},
{
"type": "User",
"login": "joestringer",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1243336?v=4"
},
{
"type": "User",
"login": "lizrice",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/458616?v=4"
},
{
"type": "User",
"login": "dgkncelik",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/25586685?v=4"
}
],
"contributors_sampled": 14,
"top_contributor_share": 0.28
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build-images-ci.yml",
"build-images-default-branch.yml",
"build-images-releases.yml",
"build-images-stable-branches.yml",
"generated-files.yaml",
"gotests.yml",
"lint-codeql.yml",
"static-checks.yaml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yaml",
".golangci.yml"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "internal error: Client.Actions.ListWorkflowRunsByFileName: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/olsajiri/tetragon/actions/workflows/build-images-ci.yml/runs?status=success: 404 Not Found []",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 5,
"reason": "dependency not pinned by hash detected -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "77 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "70ced463af7e6608dd0d48a1e563186b1f470f96",
"ran_at": "2026-07-26T06:11:51Z",
"aggregate_score": 3.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/olsajiri/tetragon",
"host": "github.com",
"name": "tetragon",
"owner": "olsajiri"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"security": 37,
"vitality": 34,
"community": 12,
"governance": 43,
"engineering": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 34,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.8.0",
"releases_from_tags": true,
"days_since_latest_release": 1534,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1534 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1534
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [
"no_open_demand"
],
"signals": [
"scorecard_unmaintained"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1527,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 1527 days, with nothing left unanswered; held at dormant by nothing open to answer",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 1527
}
},
{
"code": "abandonment_guarded",
"params": {
"guards": "nothing open to answer"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 43,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 14,
"top_contributor_share": 0.28
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "14 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 14
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 53,
"inputs": {
"followers": 40,
"owner_type": "User",
"is_verified": null,
"owner_login": "olsajiri",
"public_repos": 16,
"account_age_days": 2887
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "40 followers of olsajiri",
"points": 11.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 40,
"login": "olsajiri"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "16 public repos, account ~7 yr old",
"points": 21,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 16
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 63,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml, .golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml, .golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 37,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "internal error: Client.Actions.ListWorkflowRunsByFileName: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/olsajiri/tetragon/actions/workflows/build-images-ci.yml/runs?status=success: 404 Not Found []",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 2.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "77 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 68,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.68,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "34 of 50 human commits state their intent (structured subject or explanatory body)",
"points": 36.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 34,
"sampled": 50
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"api/Makefile",
"bpf/Makefile",
"contrib/tester-progs/Makefile",
"vendor/github.com/cilium/ebpf/Makefile",
"vendor/github.com/emicklei/go-restful/Makefile",
"vendor/github.com/gobuffalo/flect/Makefile",
"vendor/github.com/gogo/protobuf/proto/Makefile",
"vendor/github.com/hashicorp/hcl/Makefile",
"vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
"vendor/github.com/pelletier/go-toml/Makefile",
"vendor/github.com/pkg/errors/Makefile",
"vendor/github.com/prometheus/procfs/Makefile",
"vendor/github.com/spf13/cast/Makefile",
"vendor/github.com/spf13/cobra/Makefile",
"vendor/github.com/spf13/viper/Makefile",
"vendor/github.com/vishvananda/netlink/Makefile",
"vendor/golang.org/x/net/http2/Makefile",
"vendor/google.golang.org/grpc/Makefile",
"vendor/gopkg.in/ini.v1/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, api/Makefile, bpf/Makefile, contrib/tester-progs/Makefile, vendor/github.com/cilium/ebpf/Makefile, vendor/github.com/emicklei/go-restful/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/hashicorp/hcl/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/pelletier/go-toml/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cast/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/spf13/viper/Makefile, vendor/github.com/vishvananda/netlink/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/gopkg.in/ini.v1/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, api/Makefile, bpf/Makefile, contrib/tester-progs/Makefile, vendor/github.com/cilium/ebpf/Makefile, vendor/github.com/emicklei/go-restful/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/hashicorp/hcl/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/pelletier/go-toml/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cast/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/spf13/viper/Makefile, vendor/github.com/vishvananda/netlink/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/gopkg.in/ini.v1/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml, .golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml, .golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 50",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 50
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 1769631,
"source_files_sampled": 263,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/263 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 263,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"api/v1/tetragon/tetragon.proto",
"vendor/github.com/cilium/hubble/api/v1/flow/flow.proto",
"vendor/github.com/googleapis/gnostic/extensions/extension.proto",
"vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto",
"vendor/google.golang.org/appengine/internal/base/api_base.proto",
"vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
"vendor/google.golang.org/appengine/internal/log/log_service.proto",
"vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
"vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto",
"vendor/k8s.io/api/admissionregistration/v1/generated.proto",
"vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
"vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
"vendor/k8s.io/api/apps/v1/generated.proto",
"vendor/k8s.io/api/apps/v1beta1/generated.proto",
"vendor/k8s.io/api/apps/v1beta2/generated.proto",
"vendor/k8s.io/api/authentication/v1/generated.proto",
"vendor/k8s.io/api/authentication/v1beta1/generated.proto",
"vendor/k8s.io/api/authorization/v1/generated.proto",
"vendor/k8s.io/api/authorization/v1beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta2/generated.proto",
"vendor/k8s.io/api/batch/v1/generated.proto",
"vendor/k8s.io/api/batch/v1beta1/generated.proto",
"vendor/k8s.io/api/certificates/v1/generated.proto",
"vendor/k8s.io/api/certificates/v1beta1/generated.proto",
"vendor/k8s.io/api/coordination/v1/generated.proto",
"vendor/k8s.io/api/coordination/v1beta1/generated.proto",
"vendor/k8s.io/api/core/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1beta1/generated.proto",
"vendor/k8s.io/api/events/v1/generated.proto",
"vendor/k8s.io/api/events/v1beta1/generated.proto",
"vendor/k8s.io/api/extensions/v1beta1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
"vendor/k8s.io/api/networking/v1/generated.proto",
"vendor/k8s.io/api/networking/v1beta1/generated.proto",
"vendor/k8s.io/api/node/v1/generated.proto",
"vendor/k8s.io/api/node/v1alpha1/generated.proto",
"vendor/k8s.io/api/node/v1beta1/generated.proto",
"vendor/k8s.io/api/policy/v1/generated.proto",
"vendor/k8s.io/api/policy/v1beta1/generated.proto",
"vendor/k8s.io/api/rbac/v1/generated.proto",
"vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
"vendor/k8s.io/api/rbac/v1beta1/generated.proto",
"vendor/k8s.io/api/scheduling/v1/generated.proto",
"vendor/k8s.io/api/scheduling/v1alpha1/generated.proto",
"vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
"vendor/k8s.io/api/storage/v1/generated.proto",
"vendor/k8s.io/api/storage/v1alpha1/generated.proto",
"vendor/k8s.io/api/storage/v1beta1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
"vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "api/v1/tetragon/tetragon.proto, vendor/github.com/cilium/hubble/api/v1/flow/flow.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "api/v1/tetragon/tetragon.proto, vendor/github.com/cilium/hubble/api/v1/flow/flow.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"go package 'github.com/cilium/tetragon' points at a different repository (https://github.com/cilium/tetragon); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T06:12:07.056804Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/olsajiri/tetragon.svg",
"full_name": "olsajiri/tetragon",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.