Go · Go TemplateMIT★ 5 stars⑂ 11 forkssince Mar 2021View on GitHub ↗
rubrikinc/terraform-provider-polaris holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Vitality (93/100) and lowest on Community & Adoption (55/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.
71
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
71
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
42
affected_packages
7
assessed_packages
119
unassessed_packages
0
affected_by_severity
critical 2, moderate 1, unknown 4
direct_affected_packages
0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 119 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 11 ⇿
0Stars
11Forks
83Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 9Patch 23
Each point covers 4 days.
OpenSSF Scorecard 5.8 / 10
5.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-29 16:21 UTC
Full resolved dependency set from the GitHub dependency graph: 12 direct and 107 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
This repository publishes no package the index resolves, so its own dependency graph was assessed — 119 packages, which also include development and test pins that never ship: 7 carry known advisories, of which 0 are direct.
Package
Version
Relation
Severity
Advisories
Fixed in
golang.org/x/crypto
v0.49.0
indirect
critical
27
0.52.0
google.golang.org/grpc
v1.79.3
indirect
critical
2
1.82.1
golang.org/x/net
v0.52.0
indirect
moderate
9
1.26.3
github.com/yuin/goldmark
v1.7.7
indirect
unknown
1
1.7.17
go.opentelemetry.io/otel
v1.43.0
indirect
unknown
1
1.44.0
golang.org/x/sys
v0.42.0
indirect
unknown
1
0.44.0
golang.org/x/text
v0.36.0
indirect
unknown
1
0.39.0
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1928,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 1569086,
"Makefile": 105,
"Go Template": 308605
},
"pushed_at": "2026-07-25T12:52:17Z",
"created_at": "2021-03-25T17:31:42Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T12:52:30Z",
"description": "Terraform provider for the Polaris platform",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go",
"Go Template"
]
},
"owner": {
"blog": null,
"name": "Rubrikinc",
"type": "Organization",
"login": "rubrikinc",
"company": null,
"location": "Rubrik Inc.",
"followers": 175,
"avatar_url": "https://avatars.githubusercontent.com/u/13104740?v=4",
"created_at": "2015-06-29T15:25:57Z",
"is_verified": null,
"public_repos": 134,
"account_age_days": 4048
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-07-20T14:58:53Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2026-06-30T13:08:51Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-06-24T19:55:51Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-06-15T21:56:39Z"
},
{
"tag": "v1.7.1",
"kind": "patch",
"published_at": "2026-05-25T14:22:57Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-04-30T12:26:48Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2026-04-15T09:47:46Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2026-04-08T09:15:33Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2026-03-31T15:58:04Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-03-30T11:45:08Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2026-03-06T11:15:34Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-03-05T12:16:49Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-03-03T12:34:01Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-01-31T11:30:18Z"
},
{
"tag": "v1.4.0-beta.5",
"kind": "prerelease",
"published_at": "2026-01-12T08:45:18Z"
},
{
"tag": "v1.4.0-beta.4",
"kind": "prerelease",
"published_at": "2025-12-17T12:21:14Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2025-12-17T09:28:34Z"
},
{
"tag": "v1.4.0-beta.3",
"kind": "prerelease",
"published_at": "2025-11-24T15:57:50Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2025-11-24T10:15:33Z"
},
{
"tag": "v1.4.0-beta.2",
"kind": "prerelease",
"published_at": "2025-11-12T09:59:54Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2025-11-10T18:01:37Z"
},
{
"tag": "v1.4.0-beta.1",
"kind": "prerelease",
"published_at": "2025-11-07T14:10:29Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2025-10-09T09:52:16Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2025-10-06T13:08:06Z"
},
{
"tag": "v1.1.8",
"kind": "patch",
"published_at": "2025-09-25T19:52:36Z"
},
{
"tag": "v1.1.7",
"kind": "patch",
"published_at": "2025-09-17T22:33:42Z"
},
{
"tag": "v1.1.6",
"kind": "patch",
"published_at": "2025-08-14T07:53:10Z"
},
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2025-08-04T14:46:26Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2025-07-24T19:45:14Z"
},
{
"tag": "v1.1.3",
"kind": "patch",
"published_at": "2025-07-23T15:17:21Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2025-06-27T08:18:24Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2025-06-24T09:19:11Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-06-12T11:46:28Z"
},
{
"tag": "v1.1.0-beta.10",
"kind": "prerelease",
"published_at": "2025-06-04T21:07:06Z"
},
{
"tag": "v1.1.0-beta.9",
"kind": "prerelease",
"published_at": "2025-05-14T13:19:35Z"
},
{
"tag": "v1.1.0-beta.8",
"kind": "prerelease",
"published_at": "2025-04-30T09:14:42Z"
},
{
"tag": "v1.1.0-beta.7",
"kind": "prerelease",
"published_at": "2025-04-28T21:23:18Z"
},
{
"tag": "v1.1.0-beta.6",
"kind": "prerelease",
"published_at": "2025-04-10T12:13:32Z"
},
{
"tag": "v1.1.0-beta.5",
"kind": "prerelease",
"published_at": "2025-04-08T14:46:04Z"
},
{
"tag": "v1.1.0-beta.4",
"kind": "prerelease",
"published_at": "2025-03-31T14:45:21Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-02-27T22:56:17Z"
},
{
"tag": "v1.1.0-beta.3",
"kind": "prerelease",
"published_at": "2025-02-20T12:59:46Z"
},
{
"tag": "v1.1.0-beta.2",
"kind": "prerelease",
"published_at": "2025-02-06T16:01:15Z"
},
{
"tag": "v1.1.0-beta.1",
"kind": "prerelease",
"published_at": "2025-02-04T22:21:38Z"
},
{
"tag": "v0.10.0-beta.10",
"kind": "prerelease",
"published_at": "2024-11-27T13:13:47Z"
},
{
"tag": "v0.10.0-beta.9",
"kind": "prerelease",
"published_at": "2024-11-26T22:19:21Z"
},
{
"tag": "v0.10.0-beta.8",
"kind": "prerelease",
"published_at": "2024-11-26T13:58:10Z"
},
{
"tag": "v0.10.0-beta.7",
"kind": "prerelease",
"published_at": "2024-11-19T14:22:32Z"
},
{
"tag": "v0.10.0-beta.6",
"kind": "prerelease",
"published_at": "2024-11-05T10:17:04Z"
},
{
"tag": "v0.10.0-beta.5",
"kind": "prerelease",
"published_at": "2024-10-10T08:47:52Z"
},
{
"tag": "v0.10.0-beta.4",
"kind": "prerelease",
"published_at": "2024-10-03T12:51:19Z"
},
{
"tag": "v0.10.0-beta.3",
"kind": "prerelease",
"published_at": "2024-09-30T20:11:40Z"
},
{
"tag": "v0.10.0-beta.2",
"kind": "prerelease",
"published_at": "2024-08-29T17:11:08Z"
},
{
"tag": "v0.10.0-beta.1",
"kind": "prerelease",
"published_at": "2024-08-08T11:23:05Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2024-08-05T13:14:12Z"
},
{
"tag": "v0.9.0-beta.12",
"kind": "prerelease",
"published_at": "2024-08-01T11:35:26Z"
},
{
"tag": "v0.9.0-beta.11",
"kind": "prerelease",
"published_at": "2024-08-01T09:29:08Z"
},
{
"tag": "v0.9.0-beta.10",
"kind": "prerelease",
"published_at": "2024-07-26T13:50:35Z"
},
{
"tag": "v0.9.0-beta.9",
"kind": "prerelease",
"published_at": "2024-07-04T14:20:44Z"
},
{
"tag": "v0.9.0-beta.8",
"kind": "prerelease",
"published_at": "2024-06-11T12:44:33Z"
},
{
"tag": "v0.9.0-beta.7",
"kind": "prerelease",
"published_at": "2024-05-29T13:14:20Z"
},
{
"tag": "v0.9.0-beta.6",
"kind": "prerelease",
"published_at": "2024-05-28T07:34:57Z"
},
{
"tag": "v0.9.0-beta.5",
"kind": "prerelease",
"published_at": "2024-05-27T12:06:32Z"
},
{
"tag": "v0.9.0-beta.4",
"kind": "prerelease",
"published_at": "2024-05-27T09:57:41Z"
},
{
"tag": "v0.9.0-beta.3",
"kind": "prerelease",
"published_at": "2024-05-03T12:07:35Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2024-05-03T11:56:32Z"
},
{
"tag": "v0.9.0-beta.2",
"kind": "prerelease",
"published_at": "2024-05-01T22:56:31Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2024-04-15T17:21:32Z"
},
{
"tag": "v0.9.0-beta.1",
"kind": "prerelease",
"published_at": "2024-04-15T17:21:38Z"
},
{
"tag": "v0.8.0-beta.16",
"kind": "prerelease",
"published_at": "2024-02-26T15:19:30Z"
},
{
"tag": "v0.8.0-beta.15",
"kind": "prerelease",
"published_at": "2024-02-08T12:17:38Z"
},
{
"tag": "v0.8.0-beta.14",
"kind": "prerelease",
"published_at": "2024-02-06T15:19:23Z"
},
{
"tag": "v0.8.0-beta.13",
"kind": "prerelease",
"published_at": "2024-02-02T13:39:49Z"
},
{
"tag": "v0.7.7",
"kind": "patch",
"published_at": "2024-02-01T15:09:56Z"
},
{
"tag": "v0.8.0-beta.12",
"kind": "prerelease",
"published_at": "2024-01-31T17:21:57Z"
},
{
"tag": "v0.8.0-beta.11",
"kind": "prerelease",
"published_at": "2024-01-24T14:29:36Z"
},
{
"tag": "v0.7.6",
"kind": "patch",
"published_at": "2024-01-22T12:56:09Z"
},
{
"tag": "v0.8.0-beta.10",
"kind": "prerelease",
"published_at": "2024-01-18T16:26:11Z"
},
{
"tag": "v0.8.0-beta.8",
"kind": "prerelease",
"published_at": "2023-12-15T14:35:40Z"
},
{
"tag": "v0.8.0-beta.7",
"kind": "prerelease",
"published_at": "2023-11-24T16:14:46Z"
},
{
"tag": "v0.8.0-beta.6",
"kind": "prerelease",
"published_at": "2023-11-22T13:27:52Z"
},
{
"tag": "v0.8.0-beta.5",
"kind": "prerelease",
"published_at": "2023-11-14T19:27:24Z"
},
{
"tag": "v0.7.5",
"kind": "patch",
"published_at": "2023-11-02T15:41:53Z"
},
{
"tag": "v0.8.0-beta.4",
"kind": "prerelease",
"published_at": "2023-11-02T14:49:38Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2023-10-06T16:19:40Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2023-10-05T18:03:42Z"
},
{
"tag": "v0.8.0-beta.3",
"kind": "prerelease",
"published_at": "2023-09-25T08:00:15Z"
},
{
"tag": "v0.8.0-beta.2",
"kind": "prerelease",
"published_at": "2023-09-21T15:10:22Z"
},
{
"tag": "v0.8.0-beta.1",
"kind": "prerelease",
"published_at": "2023-09-20T13:52:38Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2023-08-28T18:00:54Z"
},
{
"tag": "v0.6.3",
"kind": "patch",
"published_at": "2023-07-07T12:22:03Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2023-05-15T15:38:32Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2023-03-17T16:52:27Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2023-03-07T14:11:57Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2023-02-23T15:01:55Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2023-02-15T14:37:29Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2023-01-30T13:33:09Z"
},
{
"tag": "v0.3.16",
"kind": "patch",
"published_at": "2022-12-22T12:54:10Z"
},
{
"tag": "v0.3.15",
"kind": "patch",
"published_at": "2022-10-31T14:40:54Z"
},
{
"tag": "v0.3.13",
"kind": "patch",
"published_at": "2022-06-22T12:49:05Z"
}
],
"recent_commits": [
{
"oid": "706afac5ce77fbf4a4b1d57de791cc4cd2afb9f9",
"body": "Backport of rubrikinc/terraform-provider-rubrik#50. Onboard and read\nAzure DevOps organizations, projects and repositories: a new\npolaris_azure_devops_organization resource and list resource, the\npolaris_azure_devops_{organization,project,repository,script} data\nsources, a use_case field on polaris_\n[…]\nis_object data source.\n\nUnlike the rubrik provider, the organization resource does not support\nthe moved {} block: the polaris provider is the migration source, so\nthere is nothing to move state from.",
"is_bot": false,
"headline": "Add Azure DevOps support (#463)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-07-25T12:52:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "70d12de4be1b342c3f509a0b2e830338cc9a3e3c",
"body": null,
"is_bot": false,
"headline": "Fix Duplicate Set Element error in polaris_objects data source (#469)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-20T11:29:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27e57872cd93934785e41c90e0b363c83629de8d",
"body": null,
"is_bot": false,
"headline": "Support in-place name and feature-add updates for managed account (#468)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-20T10:52:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f258b5d4a6b4889eacf75051b864f97f39411b37",
"body": null,
"is_bot": false,
"headline": "Bump rubrik-polaris-sdk-for-go to v1.9.1 (#467)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-20T08:41:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd6318b9c1ddaaf3e129fdc72495e83141c14a70",
"body": "…466)\n\nThe Azure SQL SLA acceptance tests injected the provider credentials from\nthe RUBRIK_POLARIS_SERVICEACCOUNT_FILE environment variable. When that\nvariable is unset (the default-service-account convention used by the\nnewer framework/list acceptance tests), the provider block rendered\n`credentia\n[…]\nan empty\n`provider \"polaris\" {}` block and resolve the feature flag via the default\nservice account. The tests now run (rather than silently skip) whenever a\ndefault RSC service account is configured.",
"is_bot": false,
"headline": "Run Azure SQL SLA acceptance tests via the default service account (#…",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-16T15:25:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "73f03bdad22d34e198e18c9af090948f423fa46d",
"body": "The azureNativeResourceGroups filter and each resource group's\nazureSubscriptionDetails.id use the native subscription FID, but the\ndata source's subscription_id (input and output) is the RSC cloud\naccount ID. Passing the cloud account ID as the filter silently\nreturned no resource groups.\n\nResolve the native subscriptions once and translate both directions:\ncloud account ID -> native FID for the query, and native FID -> cloud\naccount ID for the returned objects, so subscription_id round-trips.",
"is_bot": false,
"headline": "Fix polaris_objects to translate Azure subscription IDs (#465)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-16T14:19:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbcdbbaa7ff6fe562cf3af18980e212d7263d1ce",
"body": "…roups (#464)\n\nPorts rubrikinc/terraform-provider-rubrik@2b2fca8 (#51) to this provider.\nReturns every RSC hierarchy object matching object_type without a name\nfilter, starting with AzureNativeResourceGroup (optionally scoped to a\nsingle subscription). Reuses the existing NativeResourceGroups SDK call\nthat already backs the singular polaris_object data source.",
"is_bot": false,
"headline": "Backport: Add polaris_objects data source for Azure native resource g…",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-14T17:17:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "623fdd10ca7916cf341fe07a644eebbb3357c54a",
"body": "* Add retain_archive_logs_indefinitely to oracle_config in polaris_sla_domain\n\n* Address review comments: sort names.go alphabetically, add ConflictsWith for host_log_retention, document -2 sentinel, add unit tests\n\nPorts the same fixes applied to terraform-provider-rubrik PR #49. Removes the now-redundant runtime mutual-exclusivity check in fromOracleConfig since ConflictsWith enforces it at plan time.",
"is_bot": false,
"headline": "Backport: Add retain_archive_logs_indefinitely to oracle_config (#461)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-14T17:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5c17e023ec385b9f925c2e59866899d980a2bae",
"body": "* Add RSC-managed AWS BaaS onboarding resources\n\nTwo Framework resources for the RSC-managed (Rubrik-hosted) AWS onboarding\nflow, with an aws_cloudformation_stack deployed between them:\n\n- polaris_aws_account_managed: validates and finalizes the account, and\n exports the RSC account UUID plus the C\n[…]\n name via AccountByID since\nManagedAccountStack no longer carries it.\n\nVerified end to end against a live account: create, onboard and destroy all\ncompleted successfully with the rebuilt dev provider.",
"is_bot": false,
"headline": "Backport: Add RSC-managed AWS (BaaS) onboarding resources (#459)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-14T16:53:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "77ede5aa44fb88866ba4bad0c85ce97cae548084",
"body": "* Add Azure SQL V1/V2 SLA support to polaris_sla_domain\n\nBackport of rubrikinc/terraform-provider-rubrik#42: add support for the\nV1/V2 Azure SQL SLA model, gated on the CNP_AZURE_SQL_SLA_REVAMP feature.\nA V1 (Azure-managed) SLA carries a new ltr_config block (weekly, monthly,\nand yearly long-term re\n[…]\nzureSQLLTRRetention, and Domain.BackupType, added to the SDK in\nrubrikinc/rubrik-polaris-sdk-for-go#391 and #395. Pin to a commit\npseudo-version for now; repin to a tagged release once the SDK is cut.",
"is_bot": false,
"headline": "Backport: Add Azure SQL V1/V2 SLA support to polaris_sla_domain (#462)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-07-13T14:26:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3279517a548502f12f5dfbb8104db51c1496105c",
"body": "fromCloudComputeSettings read the archival_proxy_settings block instead\nof cloud_compute_settings. Specifying an archival_proxy_settings block\ncaused a nil interface conversion panic (interface {} is nil, not\nstring), and any cloud_compute_settings values were silently ignored.\nRead the correct block and add a regression test.\n\nRoll the pending VIEW_CLUSTER_REFERENCE change into v1.8.2 and rename the\nupgrade guide from v1.9.0 to v1.8.2.",
"is_bot": false,
"headline": "Fix data center archival cloud compute settings; release v1.8.2 (#458)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-06-30T12:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c05f1cd4263c3e7aacc9dc790a097adfd0df59d0",
"body": "The guide did not cover permission groups, and its cloud examples used\ndeprecated fields. Add a Permission Groups section and update the\nexamples to the current per-feature permission_groups model.\n\nBackport of rubrikinc/terraform-provider-rubrik#41.",
"is_bot": false,
"headline": "Document permission groups in the permissions guide (#457)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-06-29T13:08:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91cf6413760771e1ceb48bb0ff15db0c54aaea72",
"body": "RSC automatically grants VIEW_CLUSTER_REFERENCE whenever VIEW_CLUSTER\nis granted, so a custom role specifying VIEW_CLUSTER alone drifts on\nevery plan. Add a ValidateConfig rule that rejects that combination;\nVIEW_CLUSTER_REFERENCE on its own stays valid.\n\nBackport of terraform-provider-rubrik #40.",
"is_bot": false,
"headline": "Reject VIEW_CLUSTER without VIEW_CLUSTER_REFERENCE (#456)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-06-29T08:58:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1a06104295e57809b724d04022dcfbcadc53f88",
"body": "The Go SDK now filters the spurious duplicate CROSSACCOUNT role artifact\nthat RSC returns for role-chaining-only accounts, and RSC now returns a\nreal ROLE_CHAINING permission policy. Remove the provider's compensating\nworkarounds: synthesizing the ROLE_CHAINING artifact from CROSSACCOUNT,\nstripping it on read, and injecting a synthetic sts:AssumeRole policy.\nBump rubrik-polaris-sdk-for-go to pick up the artifact filtering.",
"is_bot": false,
"headline": "Drop client-side ROLE_CHAINING workarounds in AWS CNP resources (#455)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-06-24T15:48:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86521aebd66074d5c658ec7fc9c6383a705e58a3",
"body": "Allow onboarding the SERVERS_AND_APPS feature for GCP projects via the\npolaris_gcp_project resource and reading it back through the\npolaris_gcp_project and polaris_gcp_permissions data sources.\n\nUnlike other GCP features, SERVERS_AND_APPS uses only the CLOUD_CLUSTER_ES\npermission group and does not use BASIC, so the docs and the\npermissions data source note are adjusted accordingly.",
"is_bot": false,
"headline": "Add support for SERVERS_AND_APPS feature in GCP project (#454)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-06-18T16:04:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acc79c2a28b4a1e7f292c4c871c23a206b9bff4a",
"body": null,
"is_bot": false,
"headline": "Align v1.8.0 changelog with the rubrik provider (#452)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-06-15T18:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b84baf674b061aae6f7b627f17c7bc3f08694180",
"body": null,
"is_bot": false,
"headline": "Add polaris_azure_permission_groups data source (#450)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-06-10T13:56:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95060e057f866cc7e92e87c9b4f5e8776d19e4c6",
"body": "…449)",
"is_bot": false,
"headline": "Add AzureNativeResourceGroup support to polaris_object data source (#…",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-06-09T10:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fabc363c64e032169b6bc90ee4f44b4d0310822",
"body": null,
"is_bot": false,
"headline": "Add polaris_aws_permission_groups data source (#447)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-06-01T08:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71ef2a88912d95c65fc897d8a2aecc14ef07f44c",
"body": null,
"is_bot": false,
"headline": "Add Support for CCES Multi-AZ (#440)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-05-26T15:45:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09513653a38721a1f9fbec7ded1a6362a530e366",
"body": "* Bump Go SDK\n\n* Silence deprecated AllCloudClusters staticcheck warnings\n\nTemporary //lint:ignore SA1019 directives on the two AllCloudClusters\ncall sites pending migration to cluster.API.ListClusters/AllClusters.",
"is_bot": false,
"headline": "Bump Go SDK (#448)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-05-25T13:03:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "806639bd6975eb0fa475da73bfa1001cbb5d4d43",
"body": "…446)",
"is_bot": false,
"headline": "Add support for AWS RECOVERY permission group on RDS and DynamoDB (#…",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-05-22T14:00:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26d0c203888737e88253fa3de478e8c6dfecc00d",
"body": null,
"is_bot": false,
"headline": "Update Rubrik Polaris SDK for Go to v1.6.0 (#444)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-30T12:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c21f47eee43d121e2824a484514373b6852b84d",
"body": "Add CDM-tagged acceptance tests for the data center archival location\ndata source, along with shared canary and fixture helpers. Document the\nnew `cdm` build tag and `TEST_DATACENTER_FILE` requirement in CLAUDE.md.",
"is_bot": false,
"headline": "Add CDM data center acceptance tests (#437)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-30T11:27:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5877b55840bba57b94c7b4c9e1ddd3bf77d78c5f",
"body": "Document the v1.7.0 release: initial Terraform search support for the\npolaris_custom_role, polaris_user and polaris_sso_group resources, and\nthe SLA domain refresh and default fixes.\n\nAdd a Before Upgrading note that the v1.7.0 release is also published\nas the renamed rubrikinc/rubrik provider, whic\n[…]\nht\nnow, but migration to rubrikinc/rubrik will be required before the\npolaris provider is retired. Migration paths will improve over time as\nmore resources gain support for Terraform's moved {} block.",
"is_bot": false,
"headline": "Add v1.7.0 upgrade guide (#442)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-30T10:12:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a7fab1f0d52e623e848e9b6d0fff5c19ecf511e2",
"body": "Covers documentation, refactors, dep bumps, CI changes, and other\nnon-code-impact PRs that did not previously have a category to tick.\nThe PR description is expected to clarify what the change actually is.",
"is_bot": false,
"headline": "Add Other category to PR template Types of changes (#443)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-30T10:05:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8904738f1b80c309b6c6b34186cc6c6029576ab",
"body": null,
"is_bot": false,
"headline": "Bump otel dependencies from v1.39.0 to v1.43.0 (CVE-2026-29181) (#439)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-29T06:52:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b9dde9070bb3d4f4b646201cba6e9593ca42388",
"body": "Implement resource identity and list resource for polaris_sso_group,\nenabling Terraform search (terraform query) to discover SSO groups\nin RSC, including groups not managed by Terraform. Supports filtering\nby name and auth domain ID.",
"is_bot": false,
"headline": "Add Terraform search support for SSO groups (#438)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-28T06:57:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87d952730a2527dd915c82aa8b4ecbc6fbe90658",
"body": "Implement resource identity and list resource for polaris_user,\nenabling Terraform search (terraform query) to discover users\nin RSC, including users not managed by Terraform.",
"is_bot": false,
"headline": "Add Terraform search support for users (#436)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-23T13:55:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b914277357a9f80e8a27c2c7a69bc2e2bb4a24a",
"body": "The RSC backend defaults log_archival_method to LOGARCHMETH1 when the\nfield is omitted from the create request. The provider schema had no\nDefault for the field, so state read after a create-without-method\ncontained \"LOGARCHMETH1\" while config still saw it as unset, producing\na permanent drift on the next plan.\n\nMatch the schema Default to the backend default and update the\ndescription and template accordingly.",
"is_bot": false,
"headline": "Default db2_config.log_archival_method to LOGARCHMETH1",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-23T07:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a064bc5750d95c9cda3e82f85abed17f8dba5aff",
"body": "The to*Config helpers for sap_hana_config, db2_config, oracle_config and\ninformix_config skipped writing optional retention unit fields to state\nwhen the matching duration was unset. Because the schema applies a\nDefault of \"DAYS\" to those unit fields, the next plan compared the\nschema default agains\n[…]\n only emit the storage_snapshot_config block when\nits frequency or retention duration is non-zero. The API can return a\nzero-valued nested config which previously surfaced as a phantom block\nin state.",
"is_bot": false,
"headline": "Fix drift in SLA object-specific config refresh",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-23T07:21:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3564b60e69319b186ccadb90bfbb417e9abf0431",
"body": "Implement resource identity and list resource for polaris_custom_role,\nenabling Terraform search (terraform query) to discover custom roles\nin RSC, including roles not managed by Terraform.\n\nChanges:\n- Add IdentitySchema and identity tracking to custom role CRUD\n- Add list resource with optional name filtering\n- Register ListResources on the framework provider\n- Add acceptance tests for query and name-filtered query",
"is_bot": false,
"headline": "Add Terraform search support for custom roles (#434)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-22T15:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaafa0b5cb98ee2dad7792724cae5c7c5c9c6570",
"body": null,
"is_bot": false,
"headline": "Bump terraform-plugin-docs to v0.25.0 (#433)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-21T07:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da73e4a9d64217e18e82618f85c1d7d8d9123783",
"body": null,
"is_bot": false,
"headline": "Update Go SDK to v1.5.0 (#432)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-15T08:44:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d690e247d90f9848e12a6166d3bfe7e7c63e71cd",
"body": "Add changelog entry and upgrade guide section for the new\nfrequency field in the archival block of the\npolaris_sla_domain resource.",
"is_bot": false,
"headline": "Add SLA domain frequency field to v1.6.3 release docs (#431)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-15T07:31:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ae84b286854e6d62bcd36faa80f6ab4ae4f80a7",
"body": "Add ROLE_CHAINING as a valid feature for the IAM roles workflow resources and\ndata sources. Enforce mutual exclusivity with other features via CustomizeDiff.\n\nAdd role_chaining_account_id field to the account and attachments resources to\nsupport onboarding AWS accounts linked to a role chaining acco\n[…]\nta or the\nROLE_CHAINING_ROLE_ARN artifact for the ROLE_CHAINING feature. Inject a\nsynthetic sts:AssumeRole policy and duplicate the CROSSACCOUNT role ARN as\nROLE_CHAINING during artifact registration.",
"is_bot": false,
"headline": "Add AWS role chaining support (#429)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-14T20:01:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c1b665303de4e0c7bfaf0a21f5987f9de62bb931",
"body": "Allow users to override which snapshot frequencies are archived instead\nof always deriving them from the snapshot schedule. When not specified,\nbehavior is unchanged. Also expose effective frequencies as a computed\nfield on the polaris_sla_domain data source.\n\nFixes a typo in the cascading archival docs (MINUTE -> MINUTES).",
"is_bot": false,
"headline": "Add frequency field to SLA domain archival block (#430)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-14T17:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2c6bda6d1050c47e05a8dc326d8ef1b6d7ef167",
"body": "… (#427)\n\nThe limit was hardcoded to 14 characters but the backend accepts up to\n16 for SOURCE_REGION (prefix + 8-char UID = 24, Azure's max) and up to\n24 for SPECIFIC_REGION (name used directly). Add a CustomizeDiff to\nenforce the correct limit based on whether storage_account_region is set.",
"is_bot": false,
"headline": "Fix storage_account_name_prefix max length in azure archival location…",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-10T16:00:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7977ee2fb3ff63401924a86a9f43083971a957c6",
"body": null,
"is_bot": false,
"headline": "Add polaris_feature_flag data source (#425)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-04-10T11:33:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "804bc92034fd4544e9366291617546aa6aed0a06",
"body": "The Terraform Registry flags .json files listed in SHA256SUMS as\ninvalid release assets. By giving the SBOM config a distinct ID\nand filtering the checksum to only include the default archive ID,\nSBOMs are still generated and uploaded as release artifacts but no\nlonger appear in the checksum file.",
"is_bot": false,
"headline": "Exclude SBOMs from the SHA256SUMS checksum file (#423)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-09T10:56:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "748a3b976d01c5359779b700f33243e113522d2f",
"body": null,
"is_bot": false,
"headline": "Set go.mod in releaser and add dry run release (#422)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-04-08T08:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19c223da80af944f77025c711bbd307b2274672d",
"body": null,
"is_bot": false,
"headline": "Fix MI upgrade to include permission groups and release 1.6.2 (#421)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-04-07T19:07:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df9cd4a494bef1c94ba65b4616a00f02bc4d5469",
"body": "The hc-install library used by the test framework intermittently\nfails to download the Terraform binary, causing chmod errors on\nnon-existent files. Avoid this by downloading the latest 1.x\nbinary in the Pre-test stage and pointing TF_ACC_TERRAFORM_PATH\nto it.",
"is_bot": false,
"headline": "Pre-download Terraform binary for acceptance tests (#420)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-07T11:30:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1548d25fd5c5d01254207358511d3d1ec958cea",
"body": "… is enabled (#419)\n\nUpdate the polaris_refresh resource description, examples, and tests to\nrequire the cloud_discovery feature for automatic refresh. When discovery\nonboarding is enabled, automatic refresh only runs for cloud discovery,\nso the cloud_discovery feature must be onboarded alongside\ncloud_native_protection.",
"is_bot": false,
"headline": "Require cloud_discovery for polaris_refresh when discovery onboarding…",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-07T08:26:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cbc500b0a5eabac3becb553d3ce0305ab8b64cf",
"body": "…#418)\n\nWhen an SLA domain assignment is deleted, the hierarchy service\nprocesses the unassignment before the SLA domain service updates.\nIf deleteSLADomain runs immediately after, it can fail because\nthe SLA domain still reports assigned objects. Poll the object\ncount every 5s until it reaches zero before attempting the delete,\nbounded by a 10-minute resource timeout.",
"is_bot": false,
"headline": "Poll SLA domain object count before delete for eventual consistency (…",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-04-02T19:31:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1aac34f86e8d695d5736d55565e0c4db60d9555",
"body": "Update all actions in the release workflow to their latest versions:\n- actions/checkout v4.1.1 -> v6.0.2\n- actions/setup-go v5.0.0 -> v6.3.0\n- crazy-max/ghaction-import-gpg v6.1.0 -> v7.0.0\n- anchore/sbom-action/download-syft v0 -> v0.24.0\n- goreleaser/goreleaser-action v5.0.0 -> v7.0.0\n\nAlso disabl\n[…]\nient errors\nfrom the GitHub cache service.\n\nThis resolves the Node.js 20 deprecation warning reported by the\npipeline. Node.js 20 actions will be forced to run with Node.js 24\nstarting June 2nd, 2026.",
"is_bot": false,
"headline": "Update GitHub Actions to latest versions (#417)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-04-01T11:46:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c9429c66786b7ae76894ddca2eaa92ec822aeb3",
"body": "Move terraform-registry-manifest.json from archives.files to\nrelease.extra_files and checksum.extra_files. This publishes it as\na standalone release artifact instead of bundling it inside every\nplatform ZIP archive, matching the HashiCorp scaffolding template.\n\nThe manifest is renamed to include the project name and version in\nthe release, following the scaffolding convention.",
"is_bot": false,
"headline": "Publish registry manifest as standalone release artifact (#416)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-31T16:49:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15bf01e9a0df4db880ba366883e87b5bb4cda7ab",
"body": null,
"is_bot": false,
"headline": "Add CLAUDE.md (#415)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-03-31T16:11:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef4b0959ff75ce35b56b8bfd8326258bad33c390",
"body": "Add a v1.6.1 changelog entry noting the re-release due to a\nGoReleaser bug that caused the v1.6.0 release to fail. Update the\nGo SDK dependency to v1.4.0.",
"is_bot": false,
"headline": "Add v1.6.1 changelog and update Go SDK to v1.4.0 (#413)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-31T14:13:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a17e6a8abcc69ecef79a54d6bcc2b24d83d5cdf1",
"body": "The framework test fixture functions load config files and create\nresources in RSC before resource.Test() checks TF_ACC. This causes\ntests to fail with errors instead of being skipped when TF_ACC is\nnot set.\n\nAdd the skipIfNotAcceptance helper function and call it from each\nfixture function so that all tests using them are automatically\nskipped without TF_ACC.",
"is_bot": false,
"headline": "Skip framework test fixtures when TF_ACC is not set (#414)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-31T14:07:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5825b252d57e218708fdb17e14d59bfae822549c",
"body": "Pin the GoReleaser version in the GitHub Actions release workflow\nand the Jenkinsfile to v2.14.3. Also update the Jenkinsfile to use\nthe goreleaser.com install URL since git.io redirects are frozen.",
"is_bot": false,
"headline": "Pin GoReleaser version to v2.14.3 (#412)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-31T14:01:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c1c8eeb7068fa88d611f6edd0910ef1b446b1bc",
"body": null,
"is_bot": false,
"headline": "Skip GCP exocompute acceptance test (#411)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-31T08:56:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b0a728301de16c432a93a75a97fcd70ae568628",
"body": "* Update v1.6.0 changelog and upgrade guide for release\n\nUpdate the changelog with all changes since v1.5.2 including new\nresources (sso_group, refresh), new data sources (identity_provider,\nsnapshot), AWS role chaining, Azure Cloud Discovery, extended\npolaris_object workload types, and the permission_groups breaking\nchange. Add New Features section to the upgrade guide covering all\nmajor additions with usage examples. Regenerated docs via go generate.",
"is_bot": false,
"headline": "Update v1.6.0 changelog and upgrade guide (#410)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-03-30T11:31:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f71ecde352c91a8cb5aa428b981a25a0e4b216d",
"body": null,
"is_bot": false,
"headline": "Add protection of useast2 in the Azure refresh test (#409)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-27T16:29:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7c0e15cfd11c4364dd019a1ac48ea71b2a99770",
"body": "The test was skipped due to NISD-587, which has been resolved.",
"is_bot": false,
"headline": "Remove skip of GCP exocompute acceptance test (#404)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-27T07:57:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0e1e183291e13aa89189785fe5c4feb73f3059e",
"body": "Add a new polaris_sso_group resource for creating and managing SSO\ngroups in RSC. Supports full CRUD operations with import via\ngroup_name:identity_provider_id format.",
"is_bot": false,
"headline": "Add SSO group resource (#408)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-26T15:52:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b5b9f4aae1cccf0635352e3eeb18a6adf634f73",
"body": "…S accounts (#399)\n\nAdd the polaris_refresh resource which polls until an account or\nsubscription's inventory refresh in RSC is newer than a given timestamp.\nThis ensures leaf objects like VMs and EC2 instances are discoverable via\npolaris_object after onboarding.\n\nAlso add a retry loop to the polaris_object data source for\nAwsNativeAccount lookups, since newly onboarded accounts may not appear\nin the hierarchy immediately.",
"is_bot": false,
"headline": "Add polaris_refresh resource and retry logic to polaris_object for AW…",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-26T15:41:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17c0e4b7958fb979a92230f2fc0570476471cf19",
"body": "…#397)\n\nAdd support for AwsNativeEbsVolume, AwsNativeEc2Instance, AwsNativeRdsInstance,\nand AzureNativeVirtualMachine to the polaris_object data source. Workload-level\ntypes use server-side IS_RELIC/IS_GHOST/IS_ACTIVE/IS_ARCHIVED filters to exclude\ninactive objects, in contrast to container-level ty\n[…]\nspect RSC feature status on the returned results.\n\nAdd an acceptance test for AzureNativeVirtualMachine that looks up a pre-existing\nVM by name, and update the docs to list all supported object types.",
"is_bot": false,
"headline": "Extend polaris_object data source with AWS and Azure workload types (…",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-26T15:37:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e019c2590d5352fe51baefb9b8b64cab964e7ba",
"body": null,
"is_bot": false,
"headline": "Support AWS PGs for Escalation Policies (#407)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-03-26T13:27:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb421898a57afee633471b5623fcf6755730ecf6",
"body": "Add a new polaris_identity_provider data source for looking up identity\nproviders configured in RSC by ID or name. Update the Go SDK dependency\nto a version that includes the identity provider API.",
"is_bot": false,
"headline": "Add identity provider data source (#405)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-26T09:21:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cdf77f94fb5ccf279e87007faeb7ef91052356d2",
"body": "Add the role_chaining_account_id attribute which allows referencing\nthe RSC cloud account ID of an account with the Role Chaining feature\nenabled. This enables cross-account role chaining for onboarded AWS\naccounts.",
"is_bot": false,
"headline": "Add cross-account role chaining support to AWS account resource (#403)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-25T14:20:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47ea83a9f4d9046b700cd46f7190f836d0c2a51b",
"body": "The Role Chaining feature enables cross-account role chaining for AWS\naccounts. It is mutually exclusive with all other features.",
"is_bot": false,
"headline": "Add Role Chaining feature to AWS account resource (#401)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-24T12:20:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29bb601fa2d0d01e357a864918b2ed7f537b3a5d",
"body": "The permission_groups field was optional in the cloud_native_protection\nand exocompute blocks for backwards compatibility with older\nconfigurations that predated the field. This inconsistency is now\naddressed by making the field required in all feature blocks.",
"is_bot": false,
"headline": "Make permission_groups required in all AWS account feature blocks (#402)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-24T08:57:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79ef8a411cc4fc3bb14ec3e829ac289bb080e036",
"body": null,
"is_bot": false,
"headline": "Add SBOM generation to the goreleaser config (#400)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-20T15:13:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f02a048fdf9527b18f217ee3be6b557098fa2bc3",
"body": "Introduce a Framework provider and mux it with the existing SDKv2\nprovider using tf6muxserver. Migrate the following resources and\ntests:\n\n * polaris_custom_role\n * polaris_role\n * polaris_role_assignment\n * polaris_role_template\n * polaris_sso_group\n * polaris_user",
"is_bot": false,
"headline": "Migrate role resources to the Terraform Framework (#393)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-20T13:58:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0c85f17673ef862b3f777cf855d97941771e980",
"body": null,
"is_bot": false,
"headline": "Update Go SDK version (#398)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-20T08:48:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b0fe484f91e0511690645d5f1d2b117eda54b18",
"body": "Add a new data source that looks up the closest snapshot to a given\npoint in time for a workload object using the hierarchy package's\nClosestSnapshot API. Exactly one of before_time or after_time must\nbe specified. Quarantined and anomalous snapshots are excluded by\ndefault.",
"is_bot": false,
"headline": "Add polaris_snapshot data source (#395)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-18T09:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dc6ddcf47b9b2953e0274e11779fb049f1439b6",
"body": null,
"is_bot": false,
"headline": "Skip TestAccPolarisGCPExocompute_basic due to NISD-587 (#396)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-16T22:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57673f6a991f1667031517b69415eb7ce21961b6",
"body": null,
"is_bot": false,
"headline": "Add Azure Cloud Discovery Support (#390)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-03-12T14:02:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "892668c3c9fdcdca0a94b19e23a5c6e7720a7322",
"body": null,
"is_bot": false,
"headline": "Add v1.5.2 changelog entry (#392)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-06T10:19:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ad99ba6d30f253dd3e0fa8bfe4653a850f18c77",
"body": "Adds support for the AzureStorageAccountNetworkAccess field on the\npolaris_azure_archival_location resource and data source.\n\nThe field is optional and computed on the resource, allowing RSC to\ndecide the default when omitted. Possible values are PRIVATE, PUBLIC\nand SELECTED_NETWORKS.",
"is_bot": false,
"headline": "Add network_access_type to polaris_azure_archival_location (#391)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-06T09:59:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0eae138212252a20feb5eb00122d7e19627085bc",
"body": null,
"is_bot": false,
"headline": "Add v1.5.1 changelog entry (#389)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-05T12:15:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e91df4f271d8218edbd6690e47bfbec0f4e85398",
"body": "Add the entra_group_id attribute to the polaris_azure_subscription\nresource, allowing users to configure the Entra ID group used for\nAKS cluster authentication. The field is tenant-scoped and shared\nacross all subscriptions in the same tenant.\n\nAdd acceptance test for setting and updating entra_group_id.",
"is_bot": false,
"headline": "Add entra_group_id support to polaris_azure_subscription (#383)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-05T09:26:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60b85e9f3ae690f67d0776f09fee66b29450be1e",
"body": null,
"is_bot": false,
"headline": "Update the Go SDK to v1.3.0 (#388)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-03T12:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6143ad1dd5a1f43ff14c3c60086c10c390944ef",
"body": null,
"is_bot": false,
"headline": "Add Cloud Cluster Changelog (#387)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-03-03T09:40:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e030180f71ecb83a3be87af4364aaf417d988dab",
"body": null,
"is_bot": false,
"headline": "Improve v1.5.0 upgrade guide text and examples (#386)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-03T09:22:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62dd9883de4491cadd69ee3790ab915436b46ea3",
"body": null,
"is_bot": false,
"headline": "Add RBAC Data Sources (#377)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-03-03T09:13:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b12bd49f77c2ad64a1588d727a78f97906e7e6b",
"body": null,
"is_bot": false,
"headline": "Mark subnet block fields as ForceNew (#385)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-02T18:05:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6929dee49ae850f1e81badadfa74ca5c2df8dd96",
"body": "Remove the default value assigned to the cluster_access field when\nreading the field from RSC and it not being set.\n\nRelax the constraint of the cluster access field to not conflict with\ncluster_security_group_id and node_security_group_id.",
"is_bot": false,
"headline": "Update the polaris_aws_exocompute's cluster_access field (#384)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-02T16:58:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e57accfb9606dff0238c13fa007014065a2c307",
"body": null,
"is_bot": false,
"headline": "Fix CustomizeDiff constraint for the Cloud Discovery feature (#382)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-03-02T14:11:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4d15ca169ef2cbe90f84452e8d04c6ddc8d1e4c",
"body": null,
"is_bot": false,
"headline": "Update dep circl version (#381)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-02T08:51:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3f2810dd59b543754d2e6ec88c47e6803c34ecd",
"body": "Mention the cluster_access field in the resource description and add\nthe missing ForceNew note to the cluster_access attribute documentation.",
"is_bot": false,
"headline": "Update polaris_aws_exocompute docs for private cluster access (#380)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-03-02T08:40:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aeb5ef133c9e19e9d24b93e3f89b07893c712b97",
"body": "Add Cloud Discovery support to the AWS CNP resources and data sources.\nThis enables users to onboard AWS accounts with the Cloud Discovery\nfeature, and to upgrade existing AWS accounts to enable Cloud Discovery.",
"is_bot": false,
"headline": "Add Cloud Discovery support to CNP resources (#376)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-02-27T18:28:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cc94ab7b7eeb85fdbf588493a93773c5ce35f0a",
"body": null,
"is_bot": false,
"headline": "Add support for pod subnets to the AWS Exocompute resource (#378)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-02-27T18:11:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1810efa4df8072f37932ec198617d3b86a4f0b",
"body": "Add a precheck to TestAccPolarisTagRule_multiTag that queries the\nCNP_MULTIPLE_KEY_VALUE_PAIRS_IN_TAG_RULES_ENABLED feature flag and\nskips the test when it is not enabled, rather than failing with an\napply error.\n\nAlso fix an inverted boolean in client.flag() where err != nil was\nused instead of err == nil, causing the method to return true on\nerrors and false on successful disabled-flag responses.",
"is_bot": false,
"headline": "Skip multi-tag test when feature flag is disabled (#379)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-27T17:17:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e96c096ca935bc969d0c90e15cdf70b8196933ea",
"body": null,
"is_bot": false,
"headline": "Add CMK TDE Support (#370)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-02-26T13:43:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93c357f30a08492213d7e3910ba671bf74a9349f",
"body": "Added support for all missing RSC features to the resource, including\nthe Cloud Discovery feature.\n\nRefactored how the Outpost RSC feature is handled. The outpost account\nID and outpost account profile fields have both been made\noptional. The outpost account ID will now default to the account\nidentified by the main AWS profile. If the outpost account is a\ndifferent AWS account, a separate polaris_aws_account resource should\nbe used.",
"is_bot": false,
"headline": "Update the polaris_aws_account resource (#372)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-02-25T12:42:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c17510dd07692962fa3bd5dbfe6b7e63e9f3b72",
"body": "…#367)\n\nThe update function was only used when the cluster_access field of the\nresource was changed. Updating the cluster_access field now requires\nthe resource to be re-created.\n\nThis change is required as the AWS Exocompute configuration update API\nendpoint cannot be used to update a single configuration identified by\na configuration ID.",
"is_bot": false,
"headline": "Remove the update function from the polaris_aws_exocompute resource (…",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-02-25T09:16:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e116e40e46082b04acaef91cd14f4bef75291b4b",
"body": null,
"is_bot": false,
"headline": "Add ClusterName, Timezone, Location and NTP Updates (#373)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-02-24T17:41:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0646c3fe2d088f6a7b1fabc834e17d20baff64a6",
"body": null,
"is_bot": false,
"headline": "Update Go version to 1.25.7 (#375)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-24T13:35:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17be3b4e6bccebd63fc037527628b5309b82ebac",
"body": null,
"is_bot": false,
"headline": "Add support for multi tag rules (#369)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-24T13:32:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa9c4e44ca85a5906eb50f8827fddf6774085021",
"body": null,
"is_bot": false,
"headline": "Update staticcheck version to v0.7.0 (#374)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-24T13:10:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f367231f33a753ce430e9dbce29434c7cb7f5381",
"body": null,
"is_bot": false,
"headline": "Add Support for CCES Cluster Updates (#361)",
"author_name": "Andy Draper",
"author_login": "Draper1",
"committed_at": "2026-02-16T14:20:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ee507ab4e64cb8cc23d95f8a6e7cd6f3866fbf1",
"body": null,
"is_bot": false,
"headline": "Update SDK to support multi tag rules (#371)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-16T08:38:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acfead9ef98190ad262fe813fbc9eb005c478ea6",
"body": null,
"is_bot": false,
"headline": "Add polaris_object data source (#366)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-11T15:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5fc6be834bbd7b187607e15b6f12b80c52c1bdd",
"body": null,
"is_bot": false,
"headline": "Updates according to SDK refactoring (#368)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-11T12:09:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af6a1310a56e6a556ab7b0579e4ac9d36ed0e1cc",
"body": null,
"is_bot": false,
"headline": "Drop cluster_access default from polaris_aws_exocompute resource (#360)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-02-11T08:43:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "977be7899ca004168931a24ef07b6a2a793e3a99",
"body": null,
"is_bot": false,
"headline": "Replace AWS Exocompute strings with constants (#362)",
"author_name": "Johan Andersson",
"author_login": "johan3141592",
"committed_at": "2026-02-10T13:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74b3d6a175b30b3f9977a05dc6f326a44d81f537",
"body": null,
"is_bot": false,
"headline": "Add workload support to sla_domain_assignment (#365)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-10T12:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61863f76d7f87ba143ad274a5c5bae51bd67acb7",
"body": null,
"is_bot": false,
"headline": "Update Go SDK version to use new hierarchy package (#363)",
"author_name": "Pontus Leitzler",
"author_login": "leitzler",
"committed_at": "2026-02-06T09:20:41Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 147,
"latest_release_at": "2026-07-20T14:58:53Z",
"latest_release_tag": "v1.9.0",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 38,
"days_since_latest_release": 9,
"mean_days_between_releases": 12.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/rubrikinc/terraform-provider-polaris",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/rubrikinc/terraform-provider-polaris",
"is_deprecated": false,
"latest_version": "v1.9.0",
"repository_url": "https://github.com/rubrikinc/terraform-provider-polaris",
"versions_count": 125,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T11:29:34Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 11,
"stars": 5,
"watchers": 7,
"fork_history": {
"days": [
{
"date": "2022-02-08",
"count": 1
},
{
"date": "2022-07-02",
"count": 1
},
{
"date": "2023-07-25",
"count": 1
},
{
"date": "2023-08-02",
"count": 1
},
{
"date": "2023-10-06",
"count": 1
},
{
"date": "2023-11-14",
"count": 1
},
{
"date": "2024-10-03",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2025-06-02",
"count": 1
},
{
"date": "2025-10-08",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
}
],
"complete": true,
"collected": 11,
"total_forks": 11
},
"star_history": null,
"open_issues_and_prs": 17
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 145412,
"source_files_sampled": 148,
"oversized_source_files": 2,
"agent_instruction_files": [
".claude/CLAUDE.md"
],
"agent_instruction_max_bytes": 6665
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.49.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-jppx-rxg9-jmrx",
"GHSA-q4h4-gmj2-qvw2",
"GHSA-qpw4-5x99-6vjp",
"GHSA-rm3j-f69w-wqmq"
],
"fixed_version": "0.52.0",
"advisory_count": 27,
"oldest_advisory_days": 68
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.79.3",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GO-2026-6061"
],
"fixed_version": "1.82.1",
"advisory_count": 2,
"oldest_advisory_days": 7
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.52.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GO-2026-4918",
"GO-2026-5025",
"GO-2026-5026",
"GO-2026-5027",
"GO-2026-5028",
"GO-2026-5029",
"GO-2026-5030",
"GO-2026-5942"
],
"fixed_version": "1.26.3",
"advisory_count": 9,
"oldest_advisory_days": 82
},
{
"name": "github.com/yuin/goldmark",
"direct": false,
"version": "v1.7.7",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5320"
],
"fixed_version": "1.7.17",
"advisory_count": 1,
"oldest_advisory_days": 21
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.43.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5158"
],
"fixed_version": "1.44.0",
"advisory_count": 1,
"oldest_advisory_days": 4
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.42.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 67
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.36.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 14
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 4,
"critical": 2,
"moderate": 1
},
"advisory_count": 42,
"affected_count": 7,
"assessed_count": 119,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/aws/aws-sdk-go-v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/hashicorp/go-cty",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/hashicorp/terraform-plugin-docs",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.25.0"
},
{
"name": "github.com/hashicorp/terraform-plugin-framework",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.0"
},
{
"name": "github.com/hashicorp/terraform-plugin-framework-validators",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.0"
},
{
"name": "github.com/hashicorp/terraform-plugin-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.0"
},
{
"name": "github.com/hashicorp/terraform-plugin-log",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.10.0"
},
{
"name": "github.com/hashicorp/terraform-plugin-mux",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "github.com/hashicorp/terraform-plugin-sdk/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.38.1"
},
{
"name": "github.com/hashicorp/terraform-plugin-testing",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.0"
},
{
"name": "github.com/rubrikinc/rubrik-polaris-sdk-for-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.2-0.20260724200238-8d96146bb3c3"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/aws/aws-sdk-go-v2",
"direct": true,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-cty",
"direct": true,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-docs",
"direct": true,
"version": "v0.25.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-framework",
"direct": true,
"version": "v1.18.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-framework-validators",
"direct": true,
"version": "v0.19.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-go",
"direct": true,
"version": "v0.30.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-log",
"direct": true,
"version": "v0.10.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-mux",
"direct": true,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-sdk/v2",
"direct": true,
"version": "v2.38.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-plugin-testing",
"direct": true,
"version": "v1.14.0",
"ecosystem": "go"
},
{
"name": "github.com/rubrikinc/rubrik-polaris-sdk-for-go",
"direct": true,
"version": "v1.9.2-0.20260724200238-8d96146bb3c3",
"ecosystem": "go"
},
{
"name": "cloud.google.com/go/compute/metadata",
"direct": false,
"version": "v0.9.0",
"ecosystem": "go"
},
{
"name": "github.com/agext/levenshtein",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v15",
"direct": false,
"version": "v15.0.0",
"ecosystem": "go"
},
{
"name": "github.com/armon/go-radix",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/config",
"direct": false,
"version": "v1.1.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"direct": false,
"version": "v1.1.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
"direct": false,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/cloudformation",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
"direct": false,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/organizations",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sso",
"direct": false,
"version": "v1.1.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sts",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/smithy-go",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest",
"direct": false,
"version": "v14.2.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest",
"direct": false,
"version": "v0.11.19",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/adal",
"direct": false,
"version": "v0.9.13",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/azure/auth",
"direct": false,
"version": "v0.5.8",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/azure/cli",
"direct": false,
"version": "v0.4.2",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/date",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/logger",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/tracing",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/bgentry/speakeasy",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/bmatcuk/doublestar/v4",
"direct": false,
"version": "v4.10.0",
"ecosystem": "go"
},
{
"name": "github.com/burntsushi/toml",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cloudflare/circl",
"direct": false,
"version": "v1.6.3",
"ecosystem": "go"
},
{
"name": "github.com/dimchansky/utfbom",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/fatih/color",
"direct": false,
"version": "v1.18.0",
"ecosystem": "go"
},
{
"name": "github.com/felixge/httpsnoop",
"direct": false,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/form3tech-oss/jwt-go",
"direct": false,
"version": "v3.2.2+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/golang-jwt/jwt/v4",
"direct": false,
"version": "v4.5.2",
"ecosystem": "go"
},
{
"name": "github.com/golang/groupcache",
"direct": false,
"version": "v0.0.0-20241129210726-2c02b8208cf8",
"ecosystem": "go"
},
{
"name": "github.com/golang/protobuf",
"direct": false,
"version": "v1.5.4",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/google/s2a-go",
"direct": false,
"version": "v0.1.7",
"ecosystem": "go"
},
{
"name": "github.com/googleapis/enterprise-certificate-proxy",
"direct": false,
"version": "v0.3.2",
"ecosystem": "go"
},
{
"name": "github.com/googleapis/gax-go/v2",
"direct": false,
"version": "v2.12.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/cli",
"direct": false,
"version": "v1.1.7",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/errwrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-checkpoint",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-cleanhttp",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-hclog",
"direct": false,
"version": "v1.6.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-multierror",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-plugin",
"direct": false,
"version": "v1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-retryablehttp",
"direct": false,
"version": "v0.7.8",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-uuid",
"direct": false,
"version": "v1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-version",
"direct": false,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/hc-install",
"direct": false,
"version": "v0.9.4",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/hcl/v2",
"direct": false,
"version": "v2.24.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/logutils",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-exec",
"direct": false,
"version": "v0.25.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-json",
"direct": false,
"version": "v0.27.3-0.20260213134036-298b8f6b673a",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-registry-address",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/terraform-svchost",
"direct": false,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/yamux",
"direct": false,
"version": "v0.1.2",
"ecosystem": "go"
},
{
"name": "github.com/huandu/xstrings",
"direct": false,
"version": "v1.3.3",
"ecosystem": "go"
},
{
"name": "github.com/imdario/mergo",
"direct": false,
"version": "v0.3.15",
"ecosystem": "go"
},
{
"name": "github.com/jmespath/go-jmespath",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/kunde21/markdownfmt/v3",
"direct": false,
"version": "v3.1.0",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/goutils",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver/v3",
"direct": false,
"version": "v3.2.0",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/sprig/v3",
"direct": false,
"version": "v3.2.3",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.14",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.9",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/copystructure",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-homedir",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-testing-interface",
"direct": false,
"version": "v1.14.1",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-wordwrap",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/reflectwalk",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/oklog/run",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/posener/complete",
"direct": false,
"version": "v1.2.3",
"ecosystem": "go"
},
{
"name": "github.com/protonmail/go-crypto",
"direct": false,
"version": "v1.4.1",
"ecosystem": "go"
},
{
"name": "github.com/shopspring/decimal",
"direct": false,
"version": "v1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cast",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/vmihailenco/msgpack",
"direct": false,
"version": "v4.0.4+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/vmihailenco/msgpack/v5",
"direct": false,
"version": "v5.4.1",
"ecosystem": "go"
},
{
"name": "github.com/vmihailenco/tagparser/v2",
"direct": false,
"version": "v2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/yuin/goldmark",
"direct": false,
"version": "v1.7.7",
"ecosystem": "go"
},
{
"name": "github.com/yuin/goldmark-meta",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/zclconf/go-cty",
"direct": false,
"version": "v1.18.1",
"ecosystem": "go"
},
{
"name": "go.abhg.dev/goldmark/frontmatter",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "go.opencensus.io",
"direct": false,
"version": "v0.24.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.49.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20230626212559-97b1e661b5df",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.35.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.52.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.34.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.42.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.43.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/api",
"direct": false,
"version": "v0.162.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/appengine",
"direct": false,
"version": "v1.6.8",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20251202230838-ff82c1b0f217",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.79.3",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 119,
"direct_count": 12,
"indirect_count": 107
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 379,
"open_issues": 14,
"closed_ratio": 0.811,
"closed_issues": 60,
"closed_unmerged_prs": 7
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "johan3141592",
"commits": 149,
"avatar_url": "https://avatars.githubusercontent.com/u/79966026?v=4"
},
{
"type": "User",
"login": "leitzler",
"commits": 63,
"avatar_url": "https://avatars.githubusercontent.com/u/3111805?v=4"
},
{
"type": "User",
"login": "Draper1",
"commits": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/6471505?v=4"
},
{
"type": "User",
"login": "JWilkinsonMB",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/107036391?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.569
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"release-dry-run.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "29 out of 30 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "22 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 8,
"reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "27 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "706afac5ce77fbf4a4b1d57de791cc4cd2afb9f9",
"ran_at": "2026-07-29T16:21:04Z",
"aggregate_score": 5.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T12:53:02Z",
"oldest_open_prs": [
{
"number": 394,
"created_at": "2026-03-10T15:58:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 424,
"created_at": "2026-04-09T10:25:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 451,
"created_at": "2026-06-15T13:08:36Z",
"last_comment_at": "2026-06-15T13:09:15Z",
"last_comment_author": "endorlabs"
}
],
"last_merged_pr_at": "2026-07-25T12:52:16Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 85,
"created_at": "2023-10-03T00:33:43Z",
"last_comment_at": "2024-04-15T18:27:46Z",
"last_comment_author": "johan3141592"
},
{
"number": 130,
"created_at": "2024-03-11T00:25:06Z",
"last_comment_at": "2024-11-28T09:24:26Z",
"last_comment_author": "johan3141592"
},
{
"number": 133,
"created_at": "2024-03-21T08:02:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 142,
"created_at": "2024-03-28T22:42:03Z",
"last_comment_at": "2024-05-02T11:57:42Z",
"last_comment_author": "johan3141592"
},
{
"number": 182,
"created_at": "2024-06-17T14:39:49Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 185,
"created_at": "2024-06-29T20:12:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 198,
"created_at": "2024-08-16T02:03:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 200,
"created_at": "2024-08-29T22:10:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 215,
"created_at": "2025-01-29T20:44:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 270,
"created_at": "2025-07-30T12:16:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 272,
"created_at": "2025-08-04T14:22:13Z",
"last_comment_at": "2026-03-26T13:39:04Z",
"last_comment_author": "hbuter-rubrik"
},
{
"number": 406,
"created_at": "2026-03-26T08:01:34Z",
"last_comment_at": "2026-04-10T12:28:17Z",
"last_comment_author": "johan3141592"
},
{
"number": 441,
"created_at": "2026-04-29T18:35:48Z",
"last_comment_at": "2026-05-05T11:49:57Z",
"last_comment_author": "JWilkinsonMB"
},
{
"number": 453,
"created_at": "2026-06-17T14:18:57Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/rubrikinc/terraform-provider-polaris",
"host": "github.com",
"name": "terraform-provider-polaris",
"owner": "rubrikinc"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 66,
"vitality": 93,
"community": 55,
"governance": 69,
"engineering": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 93,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"commits_last_year": 147,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 38
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "38/52 weeks with commits",
"points": 26.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 38
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "147 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 147
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "22 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v1.9.0",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 12.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~12.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 12.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 4,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 4 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 4
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 55,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"forks": 11,
"stars": 5,
"watchers": 7,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "5 stars",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 5
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "11 forks",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 11
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "7 watchers",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 7
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 69,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.569
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 57% of commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 57
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"merged_prs": 379,
"open_issues": 14,
"closed_issues": 60,
"issue_closed_ratio": 0.811,
"closed_unmerged_prs": 7
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "81% of issues closed",
"points": 37.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 81
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "379/386 decided PRs merged",
"points": 37.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 379,
"decided": 386
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"followers": 175,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "rubrikinc",
"public_repos": 134,
"account_age_days": 4048
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "175 followers of rubrikinc",
"points": 16.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 175,
"login": "rubrikinc"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "134 public repos, account ~11 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 134
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/rubrikinc/terraform-provider-polaris"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "125 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 125
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "29 out of 30 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 66,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "29 out of 30 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "22 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "27 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 119 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 119
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 42,
"affected_packages": 7,
"assessed_packages": 119,
"unassessed_packages": 0,
"affected_by_severity": "critical 2, moderate 1, unknown 4",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 119,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 71,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.98,
"agent_instruction_files": [
".claude/CLAUDE.md"
],
"agent_instruction_max_bytes": 6665
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": ".claude/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".claude/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "98 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 98,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 145412,
"source_files_sampled": 148,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/148 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 148,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-29T16:21:25.823665Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rubrikinc/terraform-provider-polaris.svg",
"full_name": "rubrikinc/terraform-provider-polaris",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with rubrikinc/terraform-provider-polaris. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
