trufflesecurity / trufflehog

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Only the most recent history is shown — this repository exceeds the collection window, so the earliest history is not captured.

Each point covers 2 days.

Full resolved dependency set from the GitHub dependency graph: 106 direct and 206 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 312 packages, which also include development and test pins that never ship: 11 carry known advisories, of which 3 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "icon": {
      "bytes": 334,
      "width": 32,
      "height": 32,
      "rejected": [],
      "collected": true,
      "media_type": "image/png",
      "source_url": "https://framerusercontent.com/images/Zc4TyjSMxOgNAgz2xiSmBA3veU.png",
      "source_type": "homepage",
      "content_hash": "3a10bc68a1ee86cf3220d33f9357248e9497740304f3b0e0a6d9aa775c59ea91",
      "candidates_considered": 1
    },
    "repo": {
      "topics": [
        "secret",
        "trufflehog",
        "credentials",
        "security",
        "devsecops",
        "dynamic-analysis",
        "security-tools",
        "secrets",
        "verification",
        "secret-management",
        "precommit",
        "scanning"
      ],
      "is_fork": false,
      "size_kb": 51667,
      "has_wiki": false,
      "homepage": "https://trufflesecurity.com",
      "languages": {
        "Go": 11648892,
        "Shell": 27753,
        "Python": 8665,
        "Gnuplot": 264,
        "Makefile": 1962,
        "Dockerfile": 621
      },
      "pushed_at": "2026-08-05T02:36:53Z",
      "created_at": "2016-12-31T05:08:12Z",
      "owner_type": "Organization",
      "updated_at": "2026-08-05T01:26:24Z",
      "description": "Find, verify, and analyze leaked credentials",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "AGPL-3.0",
      "default_branch": "main",
      "license_spdx_raw": "AGPL-3.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://trufflesecurity.com",
      "name": "Truffle Security",
      "type": "Organization",
      "login": "trufflesecurity",
      "company": null,
      "location": "United States of America",
      "followers": 825,
      "avatar_url": "https://avatars.githubusercontent.com/u/79229934?v=4",
      "created_at": "2021-02-17T22:06:28Z",
      "is_verified": null,
      "public_repos": 53,
      "account_age_days": 1994
    },
    "license": {
      "state": "standard",
      "spdx_id": "AGPL-3.0",
      "raw_spdx": "AGPL-3.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v3.96.0",
          "kind": "minor",
          "published_at": "2026-07-24T18:23:23Z"
        },
        {
          "tag": "v3.95.9",
          "kind": "patch",
          "published_at": "2026-07-09T23:09:52Z"
        },
        {
          "tag": "v3.95.8",
          "kind": "patch",
          "published_at": "2026-07-02T18:54:37Z"
        },
        {
          "tag": "v3.95.7",
          "kind": "patch",
          "published_at": "2026-06-29T15:50:35Z"
        },
        {
          "tag": "v3.95.6",
          "kind": "patch",
          "published_at": "2026-06-18T14:38:38Z"
        },
        {
          "tag": "v3.95.5",
          "kind": "patch",
          "published_at": "2026-06-02T16:10:06Z"
        },
        {
          "tag": "v3.95.4",
          "kind": "patch",
          "published_at": "2026-06-02T06:20:51Z"
        },
        {
          "tag": "v3.95.3",
          "kind": "patch",
          "published_at": "2026-05-11T18:38:34Z"
        },
        {
          "tag": "v3.95.2",
          "kind": "patch",
          "published_at": "2026-04-21T20:29:49Z"
        },
        {
          "tag": "v3.95.1",
          "kind": "patch",
          "published_at": "2026-04-21T18:12:48Z"
        },
        {
          "tag": "v3.95.0",
          "kind": "minor",
          "published_at": "2026-04-21T17:39:24Z"
        },
        {
          "tag": "v3.94.3",
          "kind": "patch",
          "published_at": "2026-04-08T17:02:29Z"
        },
        {
          "tag": "v3.94.2",
          "kind": "patch",
          "published_at": "2026-04-01T13:03:44Z"
        },
        {
          "tag": "v3.94.1",
          "kind": "patch",
          "published_at": "2026-03-25T16:18:15Z"
        },
        {
          "tag": "v3.94.0",
          "kind": "minor",
          "published_at": "2026-03-20T14:51:55Z"
        },
        {
          "tag": "v3.93.8",
          "kind": "patch",
          "published_at": "2026-03-09T20:04:03Z"
        },
        {
          "tag": "v3.93.7",
          "kind": "patch",
          "published_at": "2026-03-04T15:58:48Z"
        },
        {
          "tag": "v3.93.6",
          "kind": "patch",
          "published_at": "2026-02-27T15:09:47Z"
        },
        {
          "tag": "v3.93.5",
          "kind": "patch",
          "published_at": "2026-02-26T19:30:42Z"
        },
        {
          "tag": "v3.93.4",
          "kind": "patch",
          "published_at": "2026-02-19T14:17:56Z"
        },
        {
          "tag": "v3.93.3",
          "kind": "patch",
          "published_at": "2026-02-11T13:50:03Z"
        },
        {
          "tag": "v3.93.2",
          "kind": "patch",
          "published_at": "2026-02-10T23:37:51Z"
        },
        {
          "tag": "v3.93.1",
          "kind": "patch",
          "published_at": "2026-02-06T14:09:32Z"
        },
        {
          "tag": "v3.93.0",
          "kind": "minor",
          "published_at": "2026-02-04T14:03:39Z"
        },
        {
          "tag": "v3.92.5",
          "kind": "patch",
          "published_at": "2026-01-16T15:05:41Z"
        },
        {
          "tag": "v3.92.4",
          "kind": "patch",
          "published_at": "2025-12-19T15:17:06Z"
        },
        {
          "tag": "v3.92.3",
          "kind": "patch",
          "published_at": "2025-12-11T15:34:58Z"
        },
        {
          "tag": "v3.92.2",
          "kind": "patch",
          "published_at": "2025-12-10T15:16:30Z"
        },
        {
          "tag": "v3.92.1",
          "kind": "patch",
          "published_at": "2025-12-09T18:33:05Z"
        },
        {
          "tag": "v3.92.0",
          "kind": "minor",
          "published_at": "2025-12-09T14:54:23Z"
        },
        {
          "tag": "v3.91.2",
          "kind": "patch",
          "published_at": "2025-12-02T14:27:49Z"
        },
        {
          "tag": "v3.91.1",
          "kind": "patch",
          "published_at": "2025-11-20T15:41:22Z"
        },
        {
          "tag": "v3.91.0",
          "kind": "minor",
          "published_at": "2025-11-12T20:49:43Z"
        },
        {
          "tag": "v3.90.13",
          "kind": "patch",
          "published_at": "2025-11-05T14:28:53Z"
        },
        {
          "tag": "v3.90.12",
          "kind": "patch",
          "published_at": "2025-10-27T23:34:04Z"
        },
        {
          "tag": "v3.90.11",
          "kind": "patch",
          "published_at": "2025-10-15T19:56:44Z"
        },
        {
          "tag": "v3.90.10",
          "kind": "patch",
          "published_at": "2025-10-15T18:52:32Z"
        },
        {
          "tag": "v3.90.9",
          "kind": "patch",
          "published_at": "2025-10-15T16:39:46Z"
        },
        {
          "tag": "v3.90.8",
          "kind": "patch",
          "published_at": "2025-09-18T13:55:18Z"
        },
        {
          "tag": "v3.90.7",
          "kind": "patch",
          "published_at": "2025-09-18T13:52:27Z"
        },
        {
          "tag": "v3.90.6",
          "kind": "patch",
          "published_at": "2025-09-04T14:12:58Z"
        },
        {
          "tag": "v3.90.5",
          "kind": "patch",
          "published_at": "2025-08-14T21:03:08Z"
        },
        {
          "tag": "v3.90.4",
          "kind": "patch",
          "published_at": "2025-08-13T15:36:11Z"
        },
        {
          "tag": "v3.90.3",
          "kind": "patch",
          "published_at": "2025-08-04T13:16:32Z"
        },
        {
          "tag": "v3.90.2",
          "kind": "patch",
          "published_at": "2025-07-24T08:53:09Z"
        },
        {
          "tag": "v3.90.1",
          "kind": "patch",
          "published_at": "2025-07-18T14:26:00Z"
        },
        {
          "tag": "v3.90.0",
          "kind": "minor",
          "published_at": "2025-07-15T19:03:25Z"
        },
        {
          "tag": "v3.89.2",
          "kind": "patch",
          "published_at": "2025-06-16T17:05:51Z"
        },
        {
          "tag": "v3.89.1",
          "kind": "patch",
          "published_at": "2025-06-10T13:47:54Z"
        },
        {
          "tag": "v3.89.0",
          "kind": "minor",
          "published_at": "2025-06-06T16:37:27Z"
        },
        {
          "tag": "v3.88.35",
          "kind": "patch",
          "published_at": "2025-05-29T17:30:52Z"
        },
        {
          "tag": "v3.88.34",
          "kind": "patch",
          "published_at": "2025-05-23T20:15:10Z"
        },
        {
          "tag": "v3.88.33",
          "kind": "patch",
          "published_at": "2025-05-22T16:47:18Z"
        },
        {
          "tag": "v3.88.32",
          "kind": "patch",
          "published_at": "2025-05-21T16:06:05Z"
        },
        {
          "tag": "v3.88.31",
          "kind": "patch",
          "published_at": "2025-05-20T17:21:23Z"
        },
        {
          "tag": "v3.88.30",
          "kind": "patch",
          "published_at": "2025-05-16T18:28:46Z"
        },
        {
          "tag": "v3.88.29",
          "kind": "patch",
          "published_at": "2025-05-08T19:59:42Z"
        },
        {
          "tag": "v3.88.28",
          "kind": "patch",
          "published_at": "2025-05-05T19:22:04Z"
        },
        {
          "tag": "v3.88.27",
          "kind": "patch",
          "published_at": "2025-05-02T15:45:29Z"
        },
        {
          "tag": "v3.88.26",
          "kind": "patch",
          "published_at": "2025-04-29T18:54:58Z"
        },
        {
          "tag": "v3.88.25",
          "kind": "patch",
          "published_at": "2025-04-21T15:28:02Z"
        },
        {
          "tag": "v3.88.24",
          "kind": "patch",
          "published_at": "2025-04-16T22:23:59Z"
        },
        {
          "tag": "v3.88.23",
          "kind": "patch",
          "published_at": "2025-04-04T19:27:17Z"
        },
        {
          "tag": "v3.88.22",
          "kind": "patch",
          "published_at": "2025-04-03T20:45:37Z"
        },
        {
          "tag": "v3.88.21",
          "kind": "patch",
          "published_at": "2025-04-03T18:51:08Z"
        },
        {
          "tag": "v3.88.20",
          "kind": "patch",
          "published_at": "2025-03-28T00:31:21Z"
        },
        {
          "tag": "v3.88.19",
          "kind": "patch",
          "published_at": "2025-03-27T18:34:51Z"
        },
        {
          "tag": "v3.88.18",
          "kind": "patch",
          "published_at": "2025-03-18T19:26:37Z"
        },
        {
          "tag": "v3.88.17",
          "kind": "patch",
          "published_at": "2025-03-13T17:43:15Z"
        },
        {
          "tag": "v3.88.16",
          "kind": "patch",
          "published_at": "2025-03-10T15:58:41Z"
        },
        {
          "tag": "v3.88.15",
          "kind": "patch",
          "published_at": "2025-03-05T20:02:42Z"
        },
        {
          "tag": "v3.88.14",
          "kind": "patch",
          "published_at": "2025-02-27T14:50:05Z"
        },
        {
          "tag": "v3.88.13",
          "kind": "patch",
          "published_at": "2025-02-25T19:13:02Z"
        },
        {
          "tag": "v3.88.12",
          "kind": "patch",
          "published_at": "2025-02-20T18:25:19Z"
        },
        {
          "tag": "v3.88.11",
          "kind": "patch",
          "published_at": "2025-02-19T16:07:27Z"
        },
        {
          "tag": "v3.88.10",
          "kind": "patch",
          "published_at": "2025-02-18T19:07:18Z"
        },
        {
          "tag": "v3.88.9",
          "kind": "patch",
          "published_at": "2025-02-14T17:40:00Z"
        },
        {
          "tag": "v3.88.8",
          "kind": "patch",
          "published_at": "2025-02-13T14:59:39Z"
        },
        {
          "tag": "v3.88.7",
          "kind": "patch",
          "published_at": "2025-02-12T17:02:03Z"
        },
        {
          "tag": "v3.88.6",
          "kind": "patch",
          "published_at": "2025-02-10T18:34:04Z"
        },
        {
          "tag": "v3.88.5",
          "kind": "patch",
          "published_at": "2025-02-05T21:46:45Z"
        },
        {
          "tag": "v3.88.4",
          "kind": "patch",
          "published_at": "2025-01-30T20:24:29Z"
        },
        {
          "tag": "v3.88.3",
          "kind": "patch",
          "published_at": "2025-01-29T15:52:26Z"
        },
        {
          "tag": "v3.88.2",
          "kind": "patch",
          "published_at": "2025-01-09T14:21:14Z"
        },
        {
          "tag": "v3.88.1",
          "kind": "patch",
          "published_at": "2025-01-06T18:46:22Z"
        },
        {
          "tag": "v3.88.0",
          "kind": "minor",
          "published_at": "2024-12-20T21:47:43Z"
        },
        {
          "tag": "v3.87.2",
          "kind": "patch",
          "published_at": "2024-12-19T05:01:54Z"
        },
        {
          "tag": "v3.87.1",
          "kind": "patch",
          "published_at": "2024-12-18T17:04:20Z"
        },
        {
          "tag": "v3.87.0",
          "kind": "minor",
          "published_at": "2024-12-17T21:49:20Z"
        },
        {
          "tag": "v3.86.1",
          "kind": "patch",
          "published_at": "2024-12-11T19:08:00Z"
        },
        {
          "tag": "v3.86.0",
          "kind": "minor",
          "published_at": "2024-12-10T19:48:07Z"
        },
        {
          "tag": "v3.85.0",
          "kind": "minor",
          "published_at": "2024-12-05T16:11:31Z"
        },
        {
          "tag": "v3.84.2",
          "kind": "patch",
          "published_at": "2024-12-02T17:57:50Z"
        },
        {
          "tag": "v3.84.1",
          "kind": "patch",
          "published_at": "2024-11-22T21:34:08Z"
        },
        {
          "tag": "v3.84.0",
          "kind": "minor",
          "published_at": "2024-11-21T00:08:35Z"
        },
        {
          "tag": "v3.83.7",
          "kind": "patch",
          "published_at": "2024-11-15T23:03:00Z"
        },
        {
          "tag": "v3.83.6",
          "kind": "patch",
          "published_at": "2024-11-10T18:12:29Z"
        },
        {
          "tag": "v3.83.5",
          "kind": "patch",
          "published_at": "2024-11-08T01:46:34Z"
        },
        {
          "tag": "v3.83.4",
          "kind": "patch",
          "published_at": "2024-11-06T22:53:09Z"
        },
        {
          "tag": "v3.83.3",
          "kind": "patch",
          "published_at": "2024-11-05T16:57:46Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "24c98ca20e421a6807518f79c5cdd063400774f2",
          "body": "* give each clone its own directory under --clone-path\n\n* update docs\n\n* address feedback: update flag descriptions",
          "is_bot": false,
          "headline": "Give each clone its own directory under `--clone-path` (#5175)",
          "author_name": "Shahzad Haider",
          "author_login": "shahzadhaider1",
          "committed_at": "2026-08-04T17:15:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82df476e759c1448517fac6bfb3677685cdcd78a",
          "body": "* add new relic mobile app token detector\n\n* chore: regen protos, feature glag gating and add secretParts to detector result\n\n* fix: derive region from token captured\n\n* chore: regen protos\n\n---------\n\nCo-authored-by: Muneeb Ullah Khan <muneeb.thekhan222@gmail.com>",
          "is_bot": false,
          "headline": "[INS-344] Add New Relic Mobile App Token Detector (#4810)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-31T13:30:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f328fd549ee054f710c3c639593344e2b2b236b0",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update aws-sdk-go-v2 monorepo (#4890)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-31T07:50:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "076331ca6b8ddb349036ec3d09f15d65ffdb1e30",
          "body": "* Update github-actions\n\n* Match scripts/lint.sh golangci-lint version to CI workflow\n\nLocal linting pinned v2.11.4 while the workflow now pins v2.12.2, so\ngoconst, dupl, and gosec results could diverge between local and CI runs.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Bryan Beverly <bryan.beverly@trufflesec.com>\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": true,
          "headline": "Update github-actions (#5036)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-31T07:50:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4cc20985a2ca8228135780a4ca8a1a624a0f6296",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update github.com/shurcooL/githubv4 digest to 2402fdf (#5038)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-31T07:49:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4d6275bc2738abc8091d4f25408f10dcc4b6cd0",
          "body": null,
          "is_bot": false,
          "headline": "Set CircleCI project count to 3 in tests (#5166)",
          "author_name": "trufflesteeeve",
          "author_login": "trufflesteeeve",
          "committed_at": "2026-07-30T19:28:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0fc8c812ac0389707c68603d185691c920b250a",
          "body": "Prod scanners panic with \"send on closed channel\" in\nUnitHook.ejectFinishedMetrics via UnitHook.Finish. Root cause: the\nSourceManager job goroutines declare defer wg.Done() after defer\nprogress.Finish(), so with LIFO ordering the WaitGroup is released\nbefore Finish runs its hooks. Wait() can then cl\n[…]\n, and sends that start after Close are dropped instead of\n  panicking, protecting any caller that closes the hook while jobs run.\n\nThe new TestUnitHookCloseConcurrentWithFinish panics without the fix.",
          "is_bot": false,
          "headline": "fix(sources): stop UnitHook Close racing in-flight Finish sends (#5154)",
          "author_name": "Bill Rich",
          "author_login": "bill-rich",
          "committed_at": "2026-07-30T17:17:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f9c8139aaeb093242d37ebe137cc5db083fbcc7d",
          "body": "* add new relic insights query key detector\n\n* embed DefaultMultiPartCredentialProvider\n\n* remove unused params\n\n* detector type fix after merge\n\n* remove unnecessary check\n\n* fix: add secretparts and gate detector in buildDetectorList\n\n* regen protos\n\n---------\n\nCo-authored-by: Muneeb Ullah Khan <muneeb.thekhan222@gmail.com>",
          "is_bot": false,
          "headline": "[INS-345] Add New Relic Insights Query Key detector (#4781)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-30T13:47:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6fc3489ddfc913494a917119f2896cdfe6bd977",
          "body": "* add new relic user key detector\n\n* extract region verification logic to separate method\n\n* chore: regen protos, feature flag gating, add SecretParts\n\n* chore: regen protos\n\n---------\n\nCo-authored-by: Muneeb Ullah Khan <muneeb.thekhan222@gmail.com>",
          "is_bot": false,
          "headline": "[INS-339] Add New Relic User Key detector (#4794)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-30T13:29:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ca8517781d35b47fdc873f296232d538359e2f8",
          "body": "* add new relic browser key detector\n\n* add build tags to integration test\n\n* always try both region urls before returning error\n\n* extract region verification logic to separate function\n\n* fix detector type change after merge\n\n* chore: add feat flag gating and regen protos\n\n* chore: add secret parts and adjust tests accordingly\n\n* chore: regen protos and resolve comments\n\n---------\n\nCo-authored-by: Muneeb Ullah Khan <muneeb.thekhan222@gmail.com>",
          "is_bot": false,
          "headline": "[INS-348] Add New Relic Browser Key detector (#4769)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-30T13:12:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2d9ea762e2d5c93f3fcd1b6c9e8586ff91715bd",
          "body": "* add new relic license key detector\n\n* improve regex\n\n* detector type fix after merge\n\n* regen-protos\n\n* added feature flag gating\n\n* chore: add region to secretParts and adjust tests accordingly\n\n* fix: changed region logic\n\n---------\n\nCo-authored-by: Muneeb Ullah Khan <muneeb.thekhan222@gmail.com>",
          "is_bot": false,
          "headline": "[INS-318] Add New Relic License Key Detector (#4760)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-30T07:18:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac39a5653be27b1a6613d75e18535764cc7a11cf",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update github.com/avast/apkparser digest to 7fcaee4 (#5037)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-29T18:21:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d870725e59c74b2ba6dd313eefb7a34f206269c7",
          "body": "The url is a unique string that results in high-cardinality metrics,\nwhich results in very, very large time-series.",
          "is_bot": false,
          "headline": "Remove url tag from common HTTP client metrics (#5158)",
          "author_name": "Miccah",
          "author_login": "mcastorina",
          "committed_at": "2026-07-29T18:00:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81916454c159b2f2b9f9472d04cf053c02497bcb",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module go.mongodb.org/mongo-driver to v1.17.7 [SECURITY] (#5058)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-29T16:40:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67d0241853a5a8e55e2166868287c1f148176939",
          "body": "…sphrases (#5127)\n\nWhen a private key is passphrase-protected and Crack cannot recover the\npassphrase from the built-in wordlist, FromData set a verification error\non the result but then continued past the append, dropping the finding\nentirely. An encrypted key committed to a repository is still a r\n[…]\nnd encrypted:true metadata,\nmatching how unencrypted keys are already reported under\n--no-verification.\n\nCloses #5115\n\nCo-authored-by: Shahzad Haider <76992801+shahzadhaider1@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(detectors/privatekey): report encrypted keys with uncrackable pas…",
          "author_name": "genisis0x",
          "author_login": "genisis0x",
          "committed_at": "2026-07-29T06:37:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f3c981e7b77f235fd2702dd74af25fc4b72bf11",
          "body": "…son-enumerator and other byte stream methods wouldnt have it (#5151)\n\n* fix(handlers): apk handler now doesnt check for apk extension since json-enumerator and other byte stream methods wouldnt have it\n\n* fix(handlers): don't fail zip/jar processing when APK check errors\n\nContent-based APK detectio\n[…]\nileExtension infrastructure left unused after shouldHandleAsAPK stopped\nconsuming the file extension.\n\nCo-authored-by: Cursor <cursor@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursor@cursor.com>",
          "is_bot": false,
          "headline": "fix(handlers): apk handler now doesnt check for apk extension since j…",
          "author_name": "Johan Nestaas",
          "author_login": "johannestaas-trufflesec",
          "committed_at": "2026-07-24T17:38:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "05a583290be8c8f79852eb8741f5042920b47d00",
          "body": "PostHog personal API keys now use a 48-char body (52 total with phx_),\nwhile the detector only matched the legacy 43-char body (47 total).\nWiden the regex to {43,48} and add a 48-char pattern test case.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(detectors/posthog): widen phx_ key body to {43,48} (#5133)",
          "author_name": "matt",
          "author_login": "mattbrady-1",
          "committed_at": "2026-07-23T16:17:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a2ef4f51a5e3644c500f02650db88504cd7d9b68",
          "body": "job_id has high cardinality, exploding the metrics we collect.\nsource_type better aligns with our other metrics (along with\nsource_name).",
          "is_bot": false,
          "headline": "[chore] Change job_id in metric to source_type (#5149)",
          "author_name": "Miccah",
          "author_login": "mcastorina",
          "committed_at": "2026-07-22T21:13:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e74404a774dac2767b173c420393a27dff012fab",
          "body": "* updated detector to include underscore char\n\n* improved regex",
          "is_bot": false,
          "headline": "updated detector to include underscore char (#5121)",
          "author_name": "matt",
          "author_login": "mattbrady-1",
          "committed_at": "2026-07-21T22:38:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d82f215b9ec0bf795ce9955054ec7da3c612ae5",
          "body": "* [INT-789] Fix scan_all_installations rejecting org member personal repos\n\n* address review: comment swallowed errs, wrap long lines in new mapping code",
          "is_bot": false,
          "headline": "Fix `scan_all_installations` Rejecting Org Member Personal Repos (#5142)",
          "author_name": "Shahzad Haider",
          "author_login": "shahzadhaider1",
          "committed_at": "2026-07-21T13:52:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38999f88bed87fce0861ac313cbca06267b439c7",
          "body": "* retry git clone on transient network errors\n\n* check os.RemoveAll errors in clone path tests\n\n* address comments; readability improvement",
          "is_bot": false,
          "headline": "Retry git clone on transient network errors (#5132)",
          "author_name": "Shahzad Haider",
          "author_login": "shahzadhaider1",
          "committed_at": "2026-07-20T18:10:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0eb1a81c7207076c311c801394f176b6ce73a542",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/go-git/go-git/v5 to v5.19.1 [SECURITY] (#5034)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-20T16:55:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec20cb388c8cef130f0eb746be4afa8a75d8051c",
          "body": null,
          "is_bot": false,
          "headline": "document Config.SourceManager (#5002)",
          "author_name": "Amaan Ullah",
          "author_login": "amanfcp",
          "committed_at": "2026-07-20T11:03:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ecd7d56fdb6eb5ce957cfe92b5dd5f5052b5257",
          "body": "Thread ctx through HuggingFace analyzer's request chain, log every failure at origin.",
          "is_bot": false,
          "headline": "Log analyze errors for HuggingFace analyzer (#5130)",
          "author_name": "Kashif Khan",
          "author_login": "kashifkhan0771",
          "committed_at": "2026-07-20T07:33:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "124763819e92e3bd9ef578aac5a154fc380e1c3f",
          "body": "Thread ctx through Postgres analyzer's query chain, log every failure at origin.",
          "is_bot": false,
          "headline": "Log analyze errors for Postgres analyzer (#5131)",
          "author_name": "Kashif Khan",
          "author_login": "kashifkhan0771",
          "committed_at": "2026-07-20T07:33:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8708801319700a16c56abb86628803ba766d5563",
          "body": "…f a verification error (#4661)\n\n* [INS-233] Added support to verify token agains all datadog domains\n\n* Fixed cloud endpoint test\n\n* resolved bugbot comments",
          "is_bot": false,
          "headline": "[INS-255] Updated datadog detector to set verificationError in case o…",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-17T12:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23bc406bf13f794979f72e0d8a0bedaad3321c3b",
          "body": "…(#4739)\n\n* added sonarqube cloud scoped organization token detector\n\n* fixed extra data version key in v1 detector; added build tags in v2 integration test\n\n* added new detector versions to defaults file\n\n* deleted leftover file\n\n* fixed tests\n\n* handle 403 during verification\n\n* feat(sonarcloud): \n[…]\n\nCo-authored-by: Shahzad Haider <76992801+shahzadhaider1@users.noreply.github.com>\nCo-authored-by: Shahzad Haider <shahzadhaider.se@gmail.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "[Feature] Added SonarQube Cloud \"Scoped Organization Token\" Detector …",
          "author_name": "Nabeel Alam",
          "author_login": "nabeelalam",
          "committed_at": "2026-07-17T08:00:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a7bdcf95222c4369422764e168fad84fc912f0dc",
          "body": "* created duo detector\n\n* added docs reference\n\n---------\n\nCo-authored-by: Amaan Ullah <amaanuj.dev@gmail.com>",
          "is_bot": false,
          "headline": "[INS-312] Duo API Secret Key Detector (#4771)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-16T10:32:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1f9e5d1d55d12e4a976f06deef4ccf20e099644",
          "body": "…clude upstream PR changes) (#5111)\n\n* Update Cloudflare detectors for 2026+ prefixed credential formats\n\n ## Context/Background\n\nCloudflare is rolling out new prefixed credential formats in 2026.\nThe new formats (`cfk_`, `cfut_`, `cfat_`) are self-identifying via\nprefix and do not need keyword prox\n[…]\nr with account IDs in `RawV2` regardless of\n  the `verify` flag, consistent with how `cfk_` pairs with emails.\n\n* Resolved Comments\n\n---------\n\nCo-authored-by: Nicholas Comer <nicholas@cloudflare.com>",
          "is_bot": false,
          "headline": "Update Cloudflare detectors for 2026+ prefixed credential formats (in…",
          "author_name": "Kashif Khan",
          "author_login": "kashifkhan0771",
          "committed_at": "2026-07-15T06:14:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3cbcd39c7e3ceda2ec5df828ebb9338b0605076b",
          "body": "Adds metrics for tracking the lifecycle of chunks and results in the engine. How many we process, drop (and why), and successfully dispatch.",
          "is_bot": false,
          "headline": "Add metrics for chunks and results (#5128)",
          "author_name": "Miccah",
          "author_login": "mcastorina",
          "committed_at": "2026-07-14T16:24:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "547fc644180a2b4a281d23a9b01834d90ac17d11",
          "body": null,
          "is_bot": false,
          "headline": "Log analyze errors for Anthropic Analyzer (#5120)",
          "author_name": "Kashif Khan",
          "author_login": "kashifkhan0771",
          "committed_at": "2026-07-14T04:50:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c724e56cb7827262abd577fc19a4127de84b35d",
          "body": "The in-memory cache for GitLab project metadata (used to populate\nchunk metadata) was keyed by the raw HTTPURLToRepo on write but by the\nnormalized repo URL on read, so cache lookups almost always missed and\nthe underlying map grew unbounded.\n\nReplace the map with an expirable LRU cache (15,000 entr\n[…]\nstently use the normalized repo\nURL as the cache key on both writes and reads, including normalizing\nbefore cloning in ChunkUnit so the git remote URL used for metadata\nlookups matches the cached key.",
          "is_bot": false,
          "headline": "Fix GitLab project metadata cache and switch to LRU (#4727)",
          "author_name": "Kashif Khan",
          "author_login": "kashifkhan0771",
          "committed_at": "2026-07-14T04:49:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8feb77b20aeb64366d106b08f2941287755c173b",
          "body": "…rom the source (#5123)\n\n* Add TargetNotFoundError for targeted scan targets missing from the source\n\n* Check download response status in exact-path retry",
          "is_bot": false,
          "headline": "[INT-718] Add TargetNotFoundError for targeted scan targets missing f…",
          "author_name": "Bill Rich",
          "author_login": "bill-rich",
          "committed_at": "2026-07-10T22:17:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09c910786129b9e77f49a1ffadace09317291741",
          "body": "…thenticated user (#5122)",
          "is_bot": false,
          "headline": "fix(jiratoken/v1): only verify when the response body contains the au…",
          "author_name": "Shahzad Haider",
          "author_login": "shahzadhaider1",
          "committed_at": "2026-07-10T19:07:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2073418f03730d0de57bb04d50fb5e08d7bfa950",
          "body": "* added hashicorp vault token detector\n\n* added redacted field to result\n\n* bundled common logic",
          "is_bot": false,
          "headline": "[INS-355] Added Hashicorp vault token detector (#4819)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-10T10:19:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27b0417c16317ca9a472a9a8092acce143b49c55",
          "body": null,
          "is_bot": false,
          "headline": "Don't log as error when git diff is too long (#5113)",
          "author_name": "Bill Rich",
          "author_login": "bill-rich",
          "committed_at": "2026-07-09T20:28:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d328285962406cf0c11e593fdce224a0e1334038",
          "body": "* Added batch token detector\n\n* chore: gated detector behind feature flag, regen protos and update detector logic\n\n* regen protos",
          "is_bot": false,
          "headline": "[INS-410] Added batch token detector (#4824)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-09T13:18:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33d9daddb1f521c32e89aeb2ca5fce45e9980aac",
          "body": "* Retry transient failures when verifying OpenAI keys\n\nThe OpenAI verification endpoint can be slow to respond under load,\nand a single 5s client timeout was recorded as an indeterminate\nverification result with no retry. Switch the default client to the\ncommon retryable client with a 10s per-attempt timeout and up to 2\nretries with backoff on timeouts, connection errors, and 429/5xx\nresponses.\n\n* Check error when closing response body in test\n\n* Add test for exhausted retry budget",
          "is_bot": false,
          "headline": "[INT-715] Retry transient failures when verifying OpenAI keys (#5117)",
          "author_name": "Bill Rich",
          "author_login": "bill-rich",
          "committed_at": "2026-07-08T22:08:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7dcc6d3fe80206bc1bdcfb15db1dd8d890956fd",
          "body": "* feat: Support archived repo exclusion from GH org scans\n\nSigned-off-by: Shubham Hibare <Shubham.Hibare@thomsonreuters.com>\n\n* feat: Support archived repo exclusion from GH org scans\n\nSigned-off-by: Shubham Hibare <Shubham.Hibare@thomsonreuters.com>\n\n* fix checks\n\nSigned-off-by: Shubham Hibare <shu\n[…]\n>\nSigned-off-by: Shubham Hibare <shubham@hibare.in>\nCo-authored-by: Shubham Hibare <Shubham.Hibare@thomsonreuters.com>\nCo-authored-by: Shahzad Haider <76992801+shahzadhaider1@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat: Support archived repo exclusion from GH org scans (#4875)",
          "author_name": "Shubham Hibare",
          "author_login": "hibare",
          "committed_at": "2026-07-08T07:13:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f845f184e44d45a8f5aa189a85bad263cbb18d60",
          "body": "* feat(action): add image input to allow registry mirror overrides\n\n* quote variables to prevent shell injection risk\n\n---------\n\nCo-authored-by: Kashif Khan <70996046+kashifkhan0771@users.noreply.github.com>\nCo-authored-by: Shahzad Haider <76992801+shahzadhaider1@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(action): add image input to allow registry mirror overrides (#4965)",
          "author_name": "Rush",
          "author_login": "eightseventhreethree",
          "committed_at": "2026-07-08T06:57:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c979705861339b7e6ca6229545904769240d75f",
          "body": "* Add feature flags for new detectors\n\n* Slight rename, ensure the flags are false by default\n\n* Missed a name change\n\n* Turn on new detectors for OSS user\n\n* Instead of only adding flagged detectors when their flag is enabled, remove them when their flag is disabled\n\n* Thank you cursorbot\n\n* Excemp\n[…]\n* add environment to extra data\n\n* gate behind feature flag\n\n---------\n\nCo-authored-by: Charlie Gunyon <charlie.gunyon@trufflesec.com>\nCo-authored-by: Charlie Gunyon <camgunz@users.noreply.github.com>",
          "is_bot": false,
          "headline": "[INS-468] Add improved lob detector to defaults.go (#4971)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-07T10:42:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1675e1743f7ad74b11c91f232a3ed131f5281a27",
          "body": "…n (#5112)\n\nExplicit --repo entries bypass org-scan filtering entirely, so combining with --include-repos/--exclude-repos silently ignored patterns instead of erroring.\nAdd validation + doc comments explaining the bypass.",
          "is_bot": false,
          "headline": "fix: reject --include-repos/--exclude-repos with --repo in github sca…",
          "author_name": "Kashif Khan",
          "author_login": "kashifkhan0771",
          "committed_at": "2026-07-07T08:24:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c2762667cca2c6bc9bce2ff6e2a04eb22fbd453",
          "body": "* Add feature flags for new detectors\n\n* Slight rename, ensure the flags are false by default\n\n* Missed a name change\n\n* Turn on new detectors for OSS user\n\n* Instead of only adding flagged detectors when their flag is enabled, remove them when their flag is disabled\n\n* Thank you cursorbot\n\n* Excemp\n[…]\n* add new Result fields to IgnoreFields in integration test\n\n---------\n\nCo-authored-by: Charlie Gunyon <charlie.gunyon@trufflesec.com>\nCo-authored-by: Charlie Gunyon <camgunz@users.noreply.github.com>",
          "is_bot": false,
          "headline": "[INS-467] Add IPinfo detector to default detectors list (#4970)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-07T08:22:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "53e63918ad831e2dfd8d568c07071912d2fbf05f",
          "body": "* created shippo detector\n\n* Regen protos, Updated desc and ignore secret part in test\n\n* chore: feature flag gating, regen protos and fixed tests",
          "is_bot": false,
          "headline": "[INS-341] Added Shippo detector (#4820)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-07T07:14:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3b54872981534871af5a94b33ca9ae9bc540148",
          "body": "* Added Duffel Test Token Detector\n\n* regen protos and added secret parts",
          "is_bot": false,
          "headline": "[INS-351] Added Duffel Token Detector (#4795)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-07T06:58:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67339b2cb5f8be9db03b108dbe846c83de514182",
          "body": "* add new relic insights insert key detector\n\n* add build tag to integration test\n\n* check both region urls before returning error\n\n* extract region verification logic to separate method\n\n* detector type fix after merge\n\n* add secret parts\n\n* ran make protos\n\n* gate behind feature flag",
          "is_bot": false,
          "headline": "[INS-332] Add New Relic Insights Insert key detector (#4778)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-07-07T06:02:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9174f5d1cb421e9179526196d47f5b0d10a8d434",
          "body": "This includes the injection points of detectors into the rest of the systems. Specifically the detector_type.proto, which is a list of all detectors, and the defaults.go and defaults_test.go (the only contents of pkg/engine/defaults), which are also a list of all detectors.",
          "is_bot": false,
          "headline": "Integrations fully codeowns detectors (#5104)",
          "author_name": "trufflesteeeve",
          "author_login": "trufflesteeeve",
          "committed_at": "2026-07-06T14:15:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2cd191b97098913a07522227d2b5e40e57252f4",
          "body": "* feat: add OpenRouter detector\n\ncloses #4499\n\n* refactor: correct doc comment referencing OpenAI to OpenRouter\n\n* refactor: remove unnecessary `AnalysisInfo` field\n\n* fix: data field types\n\nSigned-off-by: Luc Georges <luc.sydney.georges@gmail.com>\n\n* fix: handle float fmt correctly\n\nSigned-off-by: \n[…]\n<shahzadhaider.se@gmail.com>\nCo-authored-by: Shahzad Haider <76992801+shahzadhaider1@users.noreply.github.com>\nCo-authored-by: Muneeb Ullah Khan <100969065+MuneebUllahKhan222@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat: add OpenRouter detector (#4500)",
          "author_name": "Luc Georges",
          "author_login": "McPatate",
          "committed_at": "2026-07-03T10:08:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "00155c9dc586f34d189adc83d3ac2698c2ec551f",
          "body": null,
          "is_bot": false,
          "headline": "Include encoded resume info instead of clobbering it (#5110)",
          "author_name": "Bill Rich",
          "author_login": "bill-rich",
          "committed_at": "2026-07-02T18:52:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d3a66f4780fb722d680db02c31ce0b1df496c77",
          "body": null,
          "is_bot": false,
          "headline": "fixed syntax error (#5109)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-02T12:36:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "797f02be367f68a09583034b6e1e535ae7e8c1d1",
          "body": "* added octopus deploy detector\n\n* chore: feature flag gating, regen protos\n\n* chore: add SecretParts, fix integration test\n\n* chore: refactors tests, updated http client and fix redacted token length for more visibility",
          "is_bot": false,
          "headline": "[INS-334] Octopus Deploy detector (#4787)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-02T11:15:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f04a89676cb788e9f85b725eccf81a07e4f4a4d",
          "body": "…nabled (#5072)\n\n* Skip unverified jwt results when  feature flag is enabled\n\n* update man page",
          "is_bot": false,
          "headline": "[INS-465] Skip unverified JWT Detector results when feature flag is e…",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-07-02T07:25:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "459d5a78cbfe19b48391cf407dea916114db862f",
          "body": "* Add prometheus metrics for engine channels and workers\n\n* Address potential memory leak by unregistering existing metrics\n\nThe engine isn't meant to be initialized multiple times in the same\nprocess, but this should prevent a bug in case it is.",
          "is_bot": false,
          "headline": "Add prometheus metrics for engine channels and workers (#5095)",
          "author_name": "Miccah",
          "author_login": "mcastorina",
          "committed_at": "2026-07-01T21:28:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f38f8f7dd77530315ba9218e25693b606ec3da21",
          "body": "…5043)\n\n* fix(azuresastoken): match SAS tokens regardless of parameter order\n\nThe keyPat regex required a fixed parameter order\n(sp, st, se, [sip], [spr], sv, sr, sig) and literal ':' in the timestamps.\nReal SAS tokens vary: Azure Storage Explorer emits the parameters in a\ndifferent order (sv first,\n[…]\n'=' inside a\nvalue (signature padding becomes %3D), so no legitimate value is dropped.\nAdds a regression test for a token preceded by a lowercase assignment\n(fails on the old class with zero results).",
          "is_bot": false,
          "headline": "fix(azuresastoken): match SAS tokens regardless of parameter order (#…",
          "author_name": "genisis0x",
          "author_login": "genisis0x",
          "committed_at": "2026-07-01T19:34:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6261f5cd38e133cdcf00c23e3943f3e9d012d538",
          "body": "* removed \"unauthorized\" as exception for rotated graphana secrets\n\n* updated detector to look for correct signal in 401 responses\n\n* Delete .DS_Store\n\naccidently commited\n\n* Delete pkg/.DS_Store\n\naccidentally committed",
          "is_bot": false,
          "headline": "removed \"unauthorized\" as exception for rotated graphana secrets (#5068)",
          "author_name": "Jordan Tunstill",
          "author_login": "jordanTunstill",
          "committed_at": "2026-06-29T22:39:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f446421baf832d6356c42c1743d99abff52ff334",
          "body": "* Fixed AWS detector producing non deterministic output\n\n* fixed bugbot comment\n\n---------\n\nCo-authored-by: Amaan Ullah <aman.ullah.jalal@trufflesec.com>",
          "is_bot": false,
          "headline": "[INS-407] Fixed AWS detector producing non deterministic output (#4836)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-29T10:17:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "885fa2d6b0e8347ee3d921bf79ecb6c8510f8ae1",
          "body": "* Add redhatpyxis api key detector\n\n* renamed secret parts key\n\n* regen protos and added pyxis as a keyword",
          "is_bot": false,
          "headline": "[INS-197] Add redhatpyxis api key detector (#4995)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-29T07:01:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c09d72666af2336c402d6a12d0acfd9693432060",
          "body": "* Add pganalyze read key detector\n\n* regen protos and ran gofmt",
          "is_bot": false,
          "headline": "[INS-497] Add Pganalyze Read Key Detector (#4993)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-29T06:36:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1a1d6a28a601e902d8652e75425c4b3d3294053",
          "body": null,
          "is_bot": false,
          "headline": "Expose `SecretParts` in the JSON output (#5073)",
          "author_name": "Brad Larsen",
          "author_login": "bradlarsen",
          "committed_at": "2026-06-25T17:25:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39a1435e800f8a78b61188844272a22b3ec1722d",
          "body": "…#4775)\n\n* Support scanning all GitHub App installations\n\nAdd scan_all_installations handling for GitHub App sources so multi-installation scans use the correct per-installation clients, token mapping, and fail-closed repo ownership checks.\n\n* Cache per-installation GitHub App API clients\n\nAvoid cre\n[…]\nid configuration errors are actionable.\n\n* Avoid bogus wiki alias mappings\n\nOnly derive double-wiki installation aliases when repository metadata confirms the repo itself is named with a .wiki suffix.",
          "is_bot": false,
          "headline": "Add scan_all_installations option for multi-org GitHub App scanning (…",
          "author_name": "Dustin Decker",
          "author_login": "dustin-decker",
          "committed_at": "2026-06-25T00:07:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b85dcd16cd35f7bfe4968a1e666af3602ee2193",
          "body": null,
          "is_bot": false,
          "headline": "Bump shared renovate-config to v1.0.3 (#5044)",
          "author_name": "Bryan Beverly",
          "author_login": "bryanbeverly",
          "committed_at": "2026-06-24T18:41:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e4db5fa4f301c651f659df940321bce7eb30209",
          "body": null,
          "is_bot": false,
          "headline": "Skip reverification results during deduplication (#5069)",
          "author_name": "Miccah",
          "author_login": "mcastorina",
          "committed_at": "2026-06-24T15:37:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4945fa3cd2a115fa661f9ecbedae3598557996ee",
          "body": "* Fix incorrect doc comments in huggingface engine\n\n* add huggingface bucket scanning\n\n* Update client.go\n\n* use limit=5000 on bucket listing endpoints\n\n* regenerate man page\n\n* escape bucket file path per-segment instead of whole\n\n* escape file path in bucket finding link too\n\n* use separate client without overall timeout for bucket file downloads",
          "is_bot": false,
          "headline": "huggingface: add bucket scanning (#5017)",
          "author_name": "Julien Chaumond",
          "author_login": "julien-c",
          "committed_at": "2026-06-24T14:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d196c8d11feff93b52cd2505f6b2c06085b99f3",
          "body": "* added braintrust detector\n\n* made keyword more specific\n\n* Enhance Braintrust detector description\n\n* regen protos and updated test\n\n* add feature flag gating",
          "is_bot": false,
          "headline": "[INS-406] Braintrust detector (#4826)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-24T08:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f5220357f498d156b85eff1bf8e13e841362de8",
          "body": "* fix: add git worktree support for local file:// scanning\n\nFixes #4553\n\nThe issue was introduced in v3.90.10 by PR #4502 which added local git\nconfig sanitization. When scanning a local file:// repository, the code\ncopies the git index file to support staged changes scanning. However,\nit assumed .g\n[…]\nommit.gpgsign=false to setupTestRepo\nso test commits work in environments with global GPG signing enabled.\n\n---------\n\nCo-authored-by: Shahzad Haider <76992801+shahzadhaider1@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: add git worktree support in PrepareRepo (#4690)",
          "author_name": "Andoni Alonso",
          "author_login": "andoniaf",
          "committed_at": "2026-06-23T07:30:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "092db2aa9d836cdc0bb2c9fcc93435d026e14d0c",
          "body": "…kens (#4774)\n\n* Fix GitHub App cross-org member enumeration using per-installation tokens\n\nWhen a GitHub App is installed across multiple orgs, addMembersByApp\ndiscovers all installations via JWT but uses a single installation's\ntoken to call ListMembers for every org. GitHub App installation token\n[…]\nitHub App client\n\nReuse APIClientForInstallation when constructing the configured GitHub App client so the default path shares the same per-installation client creation logic as cross-org enumeration.",
          "is_bot": false,
          "headline": "Fix GitHub App cross-org member enumeration using per-installation to…",
          "author_name": "Dustin Decker",
          "author_login": "dustin-decker",
          "committed_at": "2026-06-22T22:56:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b6b5326bfe25dbd856eccc8a8275eb5dea7bd52",
          "body": "…ive atlassian secrets. (#5029)\n\n* fixed regex typo that was causing conf uuid's to be surfaced as non-live atlassian secrets.\n\n* changed data to dummy info",
          "is_bot": false,
          "headline": "fixed regex typo that was causing conf uuid's to be surfaced as non-l…",
          "author_name": "Jordan Tunstill",
          "author_login": "jordanTunstill",
          "committed_at": "2026-06-18T22:44:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57caa0aa9b2d1d35a678347ddfcfccfc7923727e",
          "body": null,
          "is_bot": false,
          "headline": "test(handlers): point APK test fixture at trufflehog-test-assets (#5053)",
          "author_name": "Amaan Ullah",
          "author_login": "amanfcp",
          "committed_at": "2026-06-18T15:57:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48cb5425488a330bbbe391bb8e33a46f90f44bfb",
          "body": "…5041)\n\n* fix(sources/filesystem): order resume comparison by path component\n\nWhen resuming a filesystem scan, scanDir compared the directory path\nagainst the stored resume point with a raw string comparison\n(`path < resumeAfter`). Raw comparison does not match the depth-first\ntraversal order produc\n[…]\n\n\nReplace the manual component-wise loop with slices.Compare over the\nsplit path components. Equivalent ordering (a shared-prefix ancestor\npath still sorts before its descendants) with a smaller body.",
          "is_bot": false,
          "headline": "fix(sources/filesystem): order resume comparison by path component (#…",
          "author_name": "genisis0x",
          "author_login": "genisis0x",
          "committed_at": "2026-06-18T15:06:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "30d5bb91af1a771378349dbbb0c82129392acf70",
          "body": "…#5035)\n\n* s3: surface bucket listing failures for explicitly configured buckets\n\nListing failures were logged at V(3) whenever a role was assumed, hiding\naccess and role-assumption errors for buckets the user explicitly asked\nto scan. Suppression now applies only in list-all-buckets mode, and a\nbuc\n[…]\nole and reset its object counter\neach pass, so the final progress message only reflected the last role's\ncount. Multi-role scans could report 0 objects scanned even when earlier\nroles scanned objects.",
          "is_bot": false,
          "headline": "S3: surface bucket listing failures and fix multi-role object count (…",
          "author_name": "Shahzad Haider",
          "author_login": "shahzadhaider1",
          "committed_at": "2026-06-18T07:17:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0739f1cb54b8f079723abb60e79a23e5c1c275a",
          "body": null,
          "is_bot": false,
          "headline": "close todo - embed small HTTP test fixtures (#5001)",
          "author_name": "Amaan Ullah",
          "author_login": "amanfcp",
          "committed_at": "2026-06-17T13:42:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36d680a074f34a8ec9ae32614ace45c34ec820c5",
          "body": null,
          "is_bot": false,
          "headline": "add filetype=sdist param so we get the correct response code (#4988)",
          "author_name": "lukem-ts",
          "author_login": "lukem-ts",
          "committed_at": "2026-06-16T22:24:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "248ffd5bfb35dbe043817020a70369bec134e6f2",
          "body": "…erification (#5012)\n\nNewer scoped Dropbox short-lived tokens (sl.u.…) can be ~1.5KB. The scanning\nengine only passes a keyword-centered window of the chunk (512 bytes by default)\nto FromData, so these tokens were truncated before the regex saw them, producing\nan invalid token that always verified a\n[…]\n scanner so the engine\nwidens its window to fit the full token. Add a regression test that drives a long\ntoken through the Aho-Corasick windowing path.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(dropbox): prevent long sl.u. tokens from being truncated before v…",
          "author_name": "lukem-ts",
          "author_login": "lukem-ts",
          "committed_at": "2026-06-16T22:24:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "afbdaa87d92085e0755bd00122d8e14ad0007692",
          "body": "* fix: increase cache size and adjusted condition to avoid duplicates\n\n* resolved bugbot comment\n\n* resolved bugbot comment\n\n* updated tests and added detector name in the key for custom detectors\n\n* create md5 hashes of cache key to reduce cache size\n\n* removed unecessary test",
          "is_bot": false,
          "headline": "Fix: Resolve known dedup issues in notifierWorker (#5028)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-15T13:19:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bcf3764216cca2366fe4c68147a33d6016d5283",
          "body": "…feat flag, update verification logic and add custom ep configuration (#5007)\n\n* Rebase on top of origin/main\n\n* updated detector regex\n\n* resolved comments\n\n* implmented endpoint customizer interface",
          "is_bot": false,
          "headline": "[INS-472] [INS-515] Add user detector to defaults.go, gate it behind …",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-15T13:13:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84a2b33c9f891494db6ebe02f2a55b19cdf38f25",
          "body": "The SHA pin comment referenced `# v1`, but rwx-research/setup-captain\nhas no rolling v1 tag (only specific versions like v1.4.1). This caused\nRenovate to fail with \"Could not determine new digest for update.\"\n\nThe SHA itself is unchanged -- only the comment is corrected to reflect\nthe actual tagged version (v1.4.1) so Renovate can track updates.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Fix Renovate lookup: update setup-captain version comment (#4999)",
          "author_name": "Bryan Beverly",
          "author_login": "bryanbeverly",
          "committed_at": "2026-06-12T22:07:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ac0805e53b065e7188181fc80dce1800dfa51ab9",
          "body": "…ure flag (#5005)\n\n* Added rev detectors to defaults.go and gated it behind feature flag\n\n* resolved comment\n\n* updated defaults_test.go",
          "is_bot": false,
          "headline": "[INS-469] Added Rev detectors to defaults.go and gated it behind feat…",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-11T10:52:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d03d0879a3d03548a000f6eb2640307f0815c3b3",
          "body": "When an error was returned, resp was nil and a NPE occured during evaluation.",
          "is_bot": false,
          "headline": "GitHub finegrain analyzer was improperly handling errors (#4498)",
          "author_name": "Dustin Decker",
          "author_login": "dustin-decker",
          "committed_at": "2026-06-11T00:23:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b64cefe02915741a4d7efe851fe7087e83b2ac66",
          "body": "…ecret type admin interface displays it (#5027)",
          "is_bot": false,
          "headline": "set redacted value to last 4 characters of secret, to match how the s…",
          "author_name": "Jordan Tunstill",
          "author_login": "jordanTunstill",
          "committed_at": "2026-06-10T15:31:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a1d434eea627c09bba83124adc8a7246d8183e8",
          "body": "* Replace Renovate config with shared preset (high-risk tier)\n\nAdopts the org-wide shared Renovate preset pinned to v1.0.1.\nHigh-risk repos do not automerge regular dependency updates --\nonly security/CVE fixes and lockfile maintenance automerge\n(via the shared preset). All other updates require hum\n[…]\nurity/* so Renovate can\nresolve private Go modules without hitting the public module proxy.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Replace Renovate config with shared preset (high-risk tier) (#4992)",
          "author_name": "Bryan Beverly",
          "author_login": "bryanbeverly",
          "committed_at": "2026-06-09T23:27:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "28f515fbb9d08965769f6424f916d051e188b4c1",
          "body": "Rewrite the single table-driven pattern test as one focused test per\ncase, and add the coverage the tightened regex needs.\n\n* Legacy lowercase-hex and the newer prefixed company_id format each get\n  their own positive test.\n* New negatives: uppercase-hex body, a legacy body one char short, and a\n  new-format hex tail one char long.\n* Inline each test's input and assertions; drop the shared fixture block.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Restructure Klaviyo detector pattern tests (#5026)",
          "author_name": "Martin Locklear",
          "author_login": "martinlocklear",
          "committed_at": "2026-06-09T18:55:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cc90719407c982336f21887a523d330fc515ecbd",
          "body": "* updating Klaviyo PK new format\n\n* update Klaviyo test to use valid hex key pattern\n\nThe regex was tightened to match hex-only keys, so the test's\nvalidPattern is updated to a valid 34-character hex string.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n* add test coverage for new Klaviyo key fo\n[…]\n validPatternNew case exercising the pk_XXXXXX_<hex> format\nintroduced by the regex change.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Updating Klaviyo PK new format (#5009)",
          "author_name": "Bri Tan",
          "author_login": "breetan",
          "committed_at": "2026-06-09T14:13:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "133cb391b4a19b5a9167b183dd816e6473cd8467",
          "body": "…nd update verification logic (#5008)\n\n* Add wit detector to defaults.go, gate it behind feat flag and update verification logic",
          "is_bot": false,
          "headline": "[INS-473] Add wit detector to defaults.go, gate it behind feat flag a…",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-09T10:15:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5ebff41ee7981de73e748fcf7d5fbfeec1e9794",
          "body": "…nd update its verification logic (#5006)\n\n* refactored tly detector",
          "is_bot": false,
          "headline": "[INS-470] Add Tly detector to defaults.go, gate it behind feat flag a…",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-09T09:48:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba02c92dc9488b302907e6da54b0c09431e1a3f1",
          "body": null,
          "is_bot": false,
          "headline": "[INS-465] Add datadogapikey detector to defaults.go (#4969)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-06-09T05:49:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cefc1efcc0c22a09d68e051b288862c975ff1a2",
          "body": "Point TestHandleHTTPJson and TestHandleLargeHTTPJson at\ntrufflesecurity/trufflehog-test-assets instead of a personal account so\nthe fixtures survive if the upstream repo goes away.",
          "is_bot": false,
          "headline": "Re-host pkg/handlers JSON fixtures under the org (#5023)",
          "author_name": "Amaan Ullah",
          "author_login": "amanfcp",
          "committed_at": "2026-06-08T15:15:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b32841520c47f1bdf1f6f4772bac76afe07a9e92",
          "body": "* Update test containers dependency\n\n* Update other testcontainers modules to v0.42.0",
          "is_bot": false,
          "headline": "Update test containers dependency (#4978)",
          "author_name": "trufflesteeeve",
          "author_login": "trufflesteeeve",
          "committed_at": "2026-06-05T19:57:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f405cc3f835e45818a928f04f91b2e8d6567fcc7",
          "body": null,
          "is_bot": false,
          "headline": "fix: avoid terminal probes before CLI output (#4994)",
          "author_name": "守澄",
          "author_login": "Hackerchen716",
          "committed_at": "2026-06-05T19:10:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48f31cb60dfc4f81655ed7a1db181f5945f92420",
          "body": "* Move to github.com/moby/moby/client from docker/docker\n\nMoby is the preferred docker client library. The tests were also updated, because image pull options are in a different location.\n\nMost of the changes here after updating are from `go mod tidy`.\n\n* Use client.New\n\nNewClientWithOptions is deprecated. Also client.WithAPIVersionNegotiation is now the default, so is unnecessary.",
          "is_bot": false,
          "headline": "Move to github.com/moby/moby/client from docker/docker (#4987)",
          "author_name": "trufflesteeeve",
          "author_login": "trufflesteeeve",
          "committed_at": "2026-06-05T18:11:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75add79b929b263dae147d2e5bcf0daf292165cf",
          "body": "* fix(postgres): honor ignore tags for default port URLs\n\n* test(postgres): add raw vs primary secret test and document design decision",
          "is_bot": false,
          "headline": "fix(postgres): honor ignore tags for default port URLs (#4968)",
          "author_name": "Chethas Dileep",
          "author_login": "Edneam",
          "committed_at": "2026-06-05T13:17:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90a3efa36b6d4bacda94ebf2b7630ee11feab580",
          "body": "…t (#5022)\n\n* fix: scan files with lines exceeding bufio's default 64 KB token limit\n\n* added related test",
          "is_bot": false,
          "headline": "fix: scan files with lines exceeding bufio's default 64 KB token limi…",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-05T11:32:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a0f877b8afbe5ed69b5f13536eed05d259872ff",
          "body": "…gs (#5011)\n\n* enhance the verification in the enigma detector\n\n* feat(enigma): gate detector behind feature flag",
          "is_bot": false,
          "headline": "Enigma detector enhance verification to prevent false verified findin…",
          "author_name": "Shahzad Haider",
          "author_login": "shahzadhaider1",
          "committed_at": "2026-06-03T14:52:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d411fff7b8879a62509f3fa98c07f247ac089a51",
          "body": "… obfuscated APKs or APKs with resource types the 3rd party library isn't parsing (#4991)\n\n* fix(apk): adds some debugging info (APK package name) which is helpful when processing large repos of APKs, and fixes processing of obfuscated APKs that might cause lots of errors with our APK processing lib\n[…]\nnterface wrapping apkparker logic and GetResourceEntry to mock out and test that it continues through bad string entries\n\n* refactor(apk): renamed resourceEntryProvider to GetEntryer to be more go-ish",
          "is_bot": false,
          "headline": "feat(apk): adds some debugging info for APKs and fixes issues parsing…",
          "author_name": "Johan Nestaas",
          "author_login": "johannestaas-trufflesec",
          "committed_at": "2026-06-01T21:18:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "26eae1f2969f4240acfd3fc363b504b1b43255d4",
          "body": "* support aspx decoding in html decoder\n\n* check isNamespaced before prefix comparison",
          "is_bot": false,
          "headline": "[SCAN-795] HTML decoder: ASPX and entity-encoded HTML support (#4981)",
          "author_name": "Mustansir",
          "author_login": "mustansir14",
          "committed_at": "2026-06-01T13:59:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c8f64071ba92640f5cc6f4177a91e9a09b0db12",
          "body": "* Added scan version feature flag to sharepoint proto\n\n* added more fields to sharepoint proto\n\n* renamed fields",
          "is_bot": false,
          "headline": "Added source config flags to sharepoint proto (#4972)",
          "author_name": "Muneeb Ullah Khan",
          "author_login": "MuneebUllahKhan222",
          "committed_at": "2026-06-01T06:16:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f0b97f1600cd5f51e5ecb8380087807acb790f9",
          "body": "* Update CODEOWNERS: replace 5 slugs with scanning + integrations\n\n* Move gitparse and giturl to integrations\n\nRemove explicit scanning rules -- both packages fall to the\nintegrations default. They are git utility libraries consumed\nby multiple source integrations.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Update CODEOWNERS: replace 5 slugs with scanning + integrations (#4983)",
          "author_name": "Bryan Beverly",
          "author_login": "bryanbeverly",
          "committed_at": "2026-05-29T16:29:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "36f6f697079e637bccb1e05561a481d8b4016862",
          "body": "Convert all GitHub Actions uses: refs from mutable tags to immutable\nSHA pins with version comments. This prevents tag-hijack supply chain\nattacks while preserving version tracking for Renovate.\n\nPart of the org-wide Dependency Strategy Unification (Step 2).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "Pin GitHub Actions to SHA digests (#4985)",
          "author_name": "Bryan Beverly",
          "author_login": "bryanbeverly",
          "committed_at": "2026-05-27T21:03:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52ebebb9b0a762ad5b84a8c2205d38dcf471bd2d",
          "body": "Co-authored-by: Cursor Agent <cursoragent@cursor.com>\nCo-authored-by: Dustin Decker <humanatcomputer@gmail.com>",
          "is_bot": true,
          "headline": "Update Go security dependencies (#4986)",
          "author_name": "cursor[bot]",
          "author_login": "cursor[bot]",
          "committed_at": "2026-05-27T20:58:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ec67ff26cdeb5c8600a2ca83992d9347975c172a",
          "body": "…s (#4961)\n\n* Add feature flags for new detectors\n\n* Slight rename, ensure the flags are false by default\n\n* Missed a name change\n\n* Turn on new detectors for OSS user\n\n* Instead of only adding flagged detectors when their flag is enabled, remove them when their flag is disabled\n\n* Thank you cursorbot\n\n* Excempt the flagged detectors from a test",
          "is_bot": false,
          "headline": "Add feature flags for Pinecone, Cloudinary, and GitLab OAuth detector…",
          "author_name": "Charlie Gunyon",
          "author_login": "camgunz",
          "committed_at": "2026-05-26T14:25:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ec3634f6cf66a61912a923fee9d20cc45633a67",
          "body": "* fix line numbers for duplicate secrets within a chunk\n\n* fix-test: use cmpopts.IgnoreUnexported instead of cmpopts.IgnoreFields\n\n* refactor: unify FragmentLineOffset offset/ignore-tag logic\n\n* refactor: extract effectiveSecret helper for chunk-offset callers",
          "is_bot": false,
          "headline": "Fix line numbers for duplicate secrets within a chunk (#4910)",
          "author_name": "Amaan Ullah",
          "author_login": "amanfcp",
          "committed_at": "2026-05-22T10:45:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 362,
      "latest_release_at": "2026-07-24T18:23:23Z",
      "latest_release_tag": "v3.96.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 51,
      "days_since_latest_release": 11,
      "mean_days_between_releases": 10.4
    },
    "artifacts": {
      "collected": true,
      "structure": [
        "tree.dockerfile",
        "tree.go_importable",
        "tree.go_main",
        "tree.goreleaser"
      ],
      "declarations": []
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "readme_badges": {
        "hosts": [
          "goreportcard.com",
          "shields.io"
        ],
        "total": 3,
        "header": 3,
        "collected": true,
        "has_inspect_badge": false
      },
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/trufflesecurity/trufflehog/v3",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/trufflesecurity/trufflehog/v3",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "v3.96.0",
          "repository_url": "https://github.com/trufflesecurity/trufflehog",
          "versions_count": 349,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-24T17:38:46Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 11
        }
      ]
    },
    "popularity": {
      "forks": 2519,
      "stars": 27307,
      "watchers": 204,
      "fork_history": {
        "days": [
          {
            "date": "2024-08-07",
            "count": 1
          },
          {
            "date": "2024-08-08",
            "count": 2
          },
          {
            "date": "2024-08-13",
            "count": 1
          },
          {
            "date": "2024-08-14",
            "count": 2
          },
          {
            "date": "2024-08-16",
            "count": 1
          },
          {
            "date": "2024-08-17",
            "count": 1
          },
          {
            "date": "2024-08-20",
            "count": 2
          },
          {
            "date": "2024-08-24",
            "count": 2
          },
          {
            "date": "2024-08-25",
            "count": 1
          },
          {
            "date": "2024-08-26",
            "count": 4
          },
          {
            "date": "2024-08-27",
            "count": 1
          },
          {
            "date": "2024-08-28",
            "count": 1
          },
          {
            "date": "2024-08-30",
            "count": 2
          },
          {
            "date": "2024-08-31",
            "count": 1
          },
          {
            "date": "2024-09-02",
            "count": 1
          },
          {
            "date": "2024-09-04",
            "count": 1
          },
          {
            "date": "2024-09-07",
            "count": 1
          },
          {
            "date": "2024-09-08",
            "count": 1
          },
          {
            "date": "2024-09-09",
            "count": 3
          },
          {
            "date": "2024-09-10",
            "count": 1
          },
          {
            "date": "2024-09-11",
            "count": 2
          },
          {
            "date": "2024-09-13",
            "count": 3
          },
          {
            "date": "2024-09-18",
            "count": 2
          },
          {
            "date": "2024-09-19",
            "count": 1
          },
          {
            "date": "2024-09-23",
            "count": 2
          },
          {
            "date": "2024-09-24",
            "count": 1
          },
          {
            "date": "2024-09-27",
            "count": 1
          },
          {
            "date": "2024-09-30",
            "count": 1
          },
          {
            "date": "2024-10-01",
            "count": 2
          },
          {
            "date": "2024-10-02",
            "count": 4
          },
          {
            "date": "2024-10-03",
            "count": 2
          },
          {
            "date": "2024-10-07",
            "count": 1
          },
          {
            "date": "2024-10-09",
            "count": 2
          },
          {
            "date": "2024-10-10",
            "count": 1
          },
          {
            "date": "2024-10-12",
            "count": 2
          },
          {
            "date": "2024-10-13",
            "count": 2
          },
          {
            "date": "2024-10-15",
            "count": 2
          },
          {
            "date": "2024-10-20",
            "count": 1
          },
          {
            "date": "2024-10-22",
            "count": 3
          },
          {
            "date": "2024-10-23",
            "count": 1
          },
          {
            "date": "2024-10-24",
            "count": 1
          },
          {
            "date": "2024-10-27",
            "count": 1
          },
          {
            "date": "2024-10-28",
            "count": 1
          },
          {
            "date": "2024-10-30",
            "count": 1
          },
          {
            "date": "2024-10-31",
            "count": 5
          },
          {
            "date": "2024-11-01",
            "count": 6
          },
          {
            "date": "2024-11-02",
            "count": 5
          },
          {
            "date": "2024-11-03",
            "count": 5
          },
          {
            "date": "2024-11-04",
            "count": 2
          },
          {
            "date": "2024-11-05",
            "count": 1
          },
          {
            "date": "2024-11-06",
            "count": 1
          },
          {
            "date": "2024-11-09",
            "count": 2
          },
          {
            "date": "2024-11-10",
            "count": 3
          },
          {
            "date": "2024-11-11",
            "count": 2
          },
          {
            "date": "2024-11-12",
            "count": 1
          },
          {
            "date": "2024-11-13",
            "count": 1
          },
          {
            "date": "2024-11-15",
            "count": 1
          },
          {
            "date": "2024-11-17",
            "count": 1
          },
          {
            "date": "2024-11-18",
            "count": 3
          },
          {
            "date": "2024-11-19",
            "count": 1
          },
          {
            "date": "2024-11-21",
            "count": 1
          },
          {
            "date": "2024-11-22",
            "count": 1
          },
          {
            "date": "2024-11-24",
            "count": 1
          },
          {
            "date": "2024-11-26",
            "count": 1
          },
          {
            "date": "2024-11-28",
            "count": 2
          },
          {
            "date": "2024-12-01",
            "count": 1
          },
          {
            "date": "2024-12-02",
            "count": 1
          },
          {
            "date": "2024-12-04",
            "count": 2
          },
          {
            "date": "2024-12-07",
            "count": 1
          },
          {
            "date": "2024-12-09",
            "count": 1
          },
          {
            "date": "2024-12-12",
            "count": 2
          },
          {
            "date": "2024-12-15",
            "count": 1
          },
          {
            "date": "2024-12-16",
            "count": 3
          },
          {
            "date": "2024-12-17",
            "count": 1
          },
          {
            "date": "2024-12-18",
            "count": 2
          },
          {
            "date": "2024-12-19",
            "count": 1
          },
          {
            "date": "2024-12-20",
            "count": 2
          },
          {
            "date": "2024-12-21",
            "count": 1
          },
          {
            "date": "2024-12-24",
            "count": 1
          },
          {
            "date": "2024-12-27",
            "count": 1
          },
          {
            "date": "2024-12-31",
            "count": 1
          },
          {
            "date": "2025-01-01",
            "count": 2
          },
          {
            "date": "2025-01-02",
            "count": 1
          },
          {
            "date": "2025-01-03",
            "count": 1
          },
          {
            "date": "2025-01-05",
            "count": 1
          },
          {
            "date": "2025-01-07",
            "count": 2
          },
          {
            "date": "2025-01-08",
            "count": 1
          },
          {
            "date": "2025-01-18",
            "count": 1
          },
          {
            "date": "2025-01-21",
            "count": 1
          },
          {
            "date": "2025-01-22",
            "count": 1
          },
          {
            "date": "2025-01-23",
            "count": 2
          },
          {
            "date": "2025-01-26",
            "count": 1
          },
          {
            "date": "2025-01-27",
            "count": 1
          },
          {
            "date": "2025-01-28",
            "count": 2
          },
          {
            "date": "2025-01-29",
            "count": 3
          },
          {
            "date": "2025-01-31",
            "count": 4
          },
          {
            "date": "2025-02-03",
            "count": 1
          },
          {
            "date": "2025-02-05",
            "count": 1
          },
          {
            "date": "2025-02-06",
            "count": 2
          },
          {
            "date": "2025-02-10",
            "count": 2
          },
          {
            "date": "2025-02-11",
            "count": 1
          },
          {
            "date": "2025-02-12",
            "count": 1
          },
          {
            "date": "2025-02-13",
            "count": 2
          },
          {
            "date": "2025-02-18",
            "count": 1
          },
          {
            "date": "2025-02-19",
            "count": 1
          },
          {
            "date": "2025-02-20",
            "count": 3
          },
          {
            "date": "2025-02-23",
            "count": 1
          },
          {
            "date": "2025-02-24",
            "count": 1
          },
          {
            "date": "2025-02-26",
            "count": 1
          },
          {
            "date": "2025-02-28",
            "count": 2
          },
          {
            "date": "2025-03-01",
            "count": 1
          },
          {
            "date": "2025-03-02",
            "count": 3
          },
          {
            "date": "2025-03-04",
            "count": 1
          },
          {
            "date": "2025-03-07",
            "count": 1
          },
          {
            "date": "2025-03-09",
            "count": 1
          },
          {
            "date": "2025-03-11",
            "count": 1
          },
          {
            "date": "2025-03-13",
            "count": 1
          },
          {
            "date": "2025-03-14",
            "count": 2
          },
          {
            "date": "2025-03-15",
            "count": 5
          },
          {
            "date": "2025-03-17",
            "count": 1
          },
          {
            "date": "2025-03-18",
            "count": 3
          },
          {
            "date": "2025-03-19",
            "count": 1
          },
          {
            "date": "2025-03-20",
            "count": 1
          },
          {
            "date": "2025-03-23",
            "count": 1
          },
          {
            "date": "2025-03-24",
            "count": 2
          },
          {
            "date": "2025-03-25",
            "count": 1
          },
          {
            "date": "2025-03-26",
            "count": 1
          },
          {
            "date": "2025-03-28",
            "count": 2
          },
          {
            "date": "2025-03-30",
            "count": 1
          },
          {
            "date": "2025-04-01",
            "count": 1
          },
          {
            "date": "2025-04-03",
            "count": 3
          },
          {
            "date": "2025-04-07",
            "count": 1
          },
          {
            "date": "2025-04-08",
            "count": 1
          },
          {
            "date": "2025-04-09",
            "count": 1
          },
          {
            "date": "2025-04-10",
            "count": 3
          },
          {
            "date": "2025-04-11",
            "count": 2
          },
          {
            "date": "2025-04-12",
            "count": 1
          },
          {
            "date": "2025-04-15",
            "count": 2
          },
          {
            "date": "2025-04-16",
            "count": 2
          },
          {
            "date": "2025-04-17",
            "count": 3
          },
          {
            "date": "2025-04-18",
            "count": 1
          },
          {
            "date": "2025-04-19",
            "count": 1
          },
          {
            "date": "2025-04-20",
            "count": 2
          },
          {
            "date": "2025-04-21",
            "count": 1
          },
          {
            "date": "2025-04-22",
            "count": 2
          },
          {
            "date": "2025-04-25",
            "count": 1
          },
          {
            "date": "2025-04-27",
            "count": 1
          },
          {
            "date": "2025-04-29",
            "count": 1
          },
          {
            "date": "2025-04-30",
            "count": 1
          },
          {
            "date": "2025-05-01",
            "count": 1
          },
          {
            "date": "2025-05-02",
            "count": 2
          },
          {
            "date": "2025-05-03",
            "count": 1
          },
          {
            "date": "2025-05-04",
            "count": 1
          },
          {
            "date": "2025-05-06",
            "count": 1
          },
          {
            "date": "2025-05-07",
            "count": 1
          },
          {
            "date": "2025-05-10",
            "count": 1
          },
          {
            "date": "2025-05-12",
            "count": 1
          },
          {
            "date": "2025-05-13",
            "count": 1
          },
          {
            "date": "2025-05-14",
            "count": 2
          },
          {
            "date": "2025-05-15",
            "count": 1
          },
          {
            "date": "2025-05-18",
            "count": 2
          },
          {
            "date": "2025-05-19",
            "count": 1
          },
          {
            "date": "2025-05-21",
            "count": 1
          },
          {
            "date": "2025-05-26",
            "count": 1
          },
          {
            "date": "2025-05-30",
            "count": 5
          },
          {
            "date": "2025-05-31",
            "count": 1
          },
          {
            "date": "2025-06-01",
            "count": 2
          },
          {
            "date": "2025-06-02",
            "count": 1
          },
          {
            "date": "2025-06-04",
            "count": 2
          },
          {
            "date": "2025-06-05",
            "count": 1
          },
          {
            "date": "2025-06-06",
            "count": 1
          },
          {
            "date": "2025-06-07",
            "count": 2
          },
          {
            "date": "2025-06-08",
            "count": 2
          },
          {
            "date": "2025-06-09",
            "count": 2
          },
          {
            "date": "2025-06-11",
            "count": 1
          },
          {
            "date": "2025-06-15",
            "count": 1
          },
          {
            "date": "2025-06-17",
            "count": 2
          },
          {
            "date": "2025-06-18",
            "count": 1
          },
          {
            "date": "2025-06-19",
            "count": 1
          },
          {
            "date": "2025-06-20",
            "count": 1
          },
          {
            "date": "2025-06-21",
            "count": 1
          },
          {
            "date": "2025-06-23",
            "count": 2
          },
          {
            "date": "2025-06-24",
            "count": 1
          },
          {
            "date": "2025-06-25",
            "count": 1
          },
          {
            "date": "2025-06-26",
            "count": 1
          },
          {
            "date": "2025-06-27",
            "count": 2
          },
          {
            "date": "2025-06-29",
            "count": 1
          },
          {
            "date": "2025-07-01",
            "count": 2
          },
          {
            "date": "2025-07-02",
            "count": 2
          },
          {
            "date": "2025-07-03",
            "count": 2
          },
          {
            "date": "2025-07-04",
            "count": 1
          },
          {
            "date": "2025-07-05",
            "count": 2
          },
          {
            "date": "2025-07-07",
            "count": 1
          },
          {
            "date": "2025-07-08",
            "count": 2
          },
          {
            "date": "2025-07-09",
            "count": 1
          },
          {
            "date": "2025-07-11",
            "count": 1
          },
          {
            "date": "2025-07-13",
            "count": 2
          },
          {
            "date": "2025-07-14",
            "count": 1
          },
          {
            "date": "2025-07-15",
            "count": 1
          },
          {
            "date": "2025-07-16",
            "count": 1
          },
          {
            "date": "2025-07-17",
            "count": 2
          },
          {
            "date": "2025-07-18",
            "count": 4
          },
          {
            "date": "2025-07-19",
            "count": 1
          },
          {
            "date": "2025-07-20",
            "count": 2
          },
          {
            "date": "2025-07-21",
            "count": 2
          },
          {
            "date": "2025-07-23",
            "count": 3
          },
          {
            "date": "2025-07-26",
            "count": 3
          },
          {
            "date": "2025-07-28",
            "count": 1
          },
          {
            "date": "2025-07-29",
            "count": 1
          },
          {
            "date": "2025-07-30",
            "count": 2
          },
          {
            "date": "2025-08-01",
            "count": 1
          },
          {
            "date": "2025-08-02",
            "count": 2
          },
          {
            "date": "2025-08-04",
            "count": 1
          },
          {
            "date": "2025-08-05",
            "count": 1
          },
          {
            "date": "2025-08-06",
            "count": 2
          },
          {
            "date": "2025-08-08",
            "count": 2
          },
          {
            "date": "2025-08-09",
            "count": 3
          },
          {
            "date": "2025-08-10",
            "count": 1
          },
          {
            "date": "2025-08-11",
            "count": 2
          },
          {
            "date": "2025-08-14",
            "count": 1
          },
          {
            "date": "2025-08-15",
            "count": 3
          },
          {
            "date": "2025-08-19",
            "count": 3
          },
          {
            "date": "2025-08-20",
            "count": 2
          },
          {
            "date": "2025-08-21",
            "count": 1
          },
          {
            "date": "2025-08-24",
            "count": 1
          },
          {
            "date": "2025-08-27",
            "count": 1
          },
          {
            "date": "2025-08-28",
            "count": 1
          },
          {
            "date": "2025-08-29",
            "count": 2
          },
          {
            "date": "2025-08-30",
            "count": 2
          },
          {
            "date": "2025-08-31",
            "count": 1
          },
          {
            "date": "2025-09-01",
            "count": 2
          },
          {
            "date": "2025-09-02",
            "count": 1
          },
          {
            "date": "2025-09-03",
            "count": 4
          },
          {
            "date": "2025-09-04",
            "count": 7
          },
          {
            "date": "2025-09-05",
            "count": 7
          },
          {
            "date": "2025-09-06",
            "count": 12
          },
          {
            "date": "2025-09-07",
            "count": 7
          },
          {
            "date": "2025-09-08",
            "count": 4
          },
          {
            "date": "2025-09-09",
            "count": 3
          },
          {
            "date": "2025-09-10",
            "count": 2
          },
          {
            "date": "2025-09-11",
            "count": 1
          },
          {
            "date": "2025-09-12",
            "count": 2
          },
          {
            "date": "2025-09-13",
            "count": 6
          },
          {
            "date": "2025-09-14",
            "count": 4
          },
          {
            "date": "2025-09-15",
            "count": 6
          },
          {
            "date": "2025-09-16",
            "count": 6
          },
          {
            "date": "2025-09-17",
            "count": 9
          },
          {
            "date": "2025-09-19",
            "count": 3
          },
          {
            "date": "2025-09-20",
            "count": 3
          },
          {
            "date": "2025-09-21",
            "count": 2
          },
          {
            "date": "2025-09-22",
            "count": 1
          },
          {
            "date": "2025-09-24",
            "count": 3
          },
          {
            "date": "2025-09-25",
            "count": 3
          },
          {
            "date": "2025-09-26",
            "count": 3
          },
          {
            "date": "2025-09-27",
            "count": 3
          },
          {
            "date": "2025-09-30",
            "count": 2
          },
          {
            "date": "2025-10-02",
            "count": 3
          },
          {
            "date": "2025-10-03",
            "count": 1
          },
          {
            "date": "2025-10-04",
            "count": 1
          },
          {
            "date": "2025-10-05",
            "count": 3
          },
          {
            "date": "2025-10-06",
            "count": 1
          },
          {
            "date": "2025-10-07",
            "count": 3
          },
          {
            "date": "2025-10-08",
            "count": 4
          },
          {
            "date": "2025-10-09",
            "count": 1
          },
          {
            "date": "2025-10-10",
            "count": 1
          },
          {
            "date": "2025-10-11",
            "count": 1
          },
          {
            "date": "2025-10-13",
            "count": 3
          },
          {
            "date": "2025-10-14",
            "count": 2
          },
          {
            "date": "2025-10-16",
            "count": 3
          },
          {
            "date": "2025-10-17",
            "count": 1
          },
          {
            "date": "2025-10-19",
            "count": 1
          },
          {
            "date": "2025-10-20",
            "count": 1
          },
          {
            "date": "2025-10-21",
            "count": 2
          },
          {
            "date": "2025-10-22",
            "count": 1
          },
          {
            "date": "2025-10-23",
            "count": 1
          },
          {
            "date": "2025-10-24",
            "count": 1
          },
          {
            "date": "2025-10-25",
            "count": 2
          },
          {
            "date": "2025-10-26",
            "count": 1
          },
          {
            "date": "2025-10-27",
            "count": 2
          },
          {
            "date": "2025-10-28",
            "count": 1
          },
          {
            "date": "2025-10-29",
            "count": 4
          },
          {
            "date": "2025-10-30",
            "count": 2
          },
          {
            "date": "2025-11-01",
            "count": 2
          },
          {
            "date": "2025-11-03",
            "count": 4
          },
          {
            "date": "2025-11-04",
            "count": 3
          },
          {
            "date": "2025-11-05",
            "count": 2
          },
          {
            "date": "2025-11-06",
            "count": 2
          },
          {
            "date": "2025-11-09",
            "count": 1
          },
          {
            "date": "2025-11-10",
            "count": 4
          },
          {
            "date": "2025-11-13",
            "count": 3
          },
          {
            "date": "2025-11-15",
            "count": 1
          },
          {
            "date": "2025-11-16",
            "count": 1
          },
          {
            "date": "2025-11-19",
            "count": 1
          },
          {
            "date": "2025-11-21",
            "count": 1
          },
          {
            "date": "2025-11-23",
            "count": 1
          },
          {
            "date": "2025-11-25",
            "count": 3
          },
          {
            "date": "2025-11-26",
            "count": 1
          },
          {
            "date": "2025-11-27",
            "count": 2
          },
          {
            "date": "2025-11-28",
            "count": 1
          },
          {
            "date": "2025-12-01",
            "count": 2
          },
          {
            "date": "2025-12-03",
            "count": 3
          },
          {
            "date": "2025-12-04",
            "count": 1
          },
          {
            "date": "2025-12-05",
            "count": 1
          },
          {
            "date": "2025-12-06",
            "count": 2
          },
          {
            "date": "2025-12-08",
            "count": 1
          },
          {
            "date": "2025-12-09",
            "count": 1
          },
          {
            "date": "2025-12-10",
            "count": 1
          },
          {
            "date": "2025-12-11",
            "count": 1
          },
          {
            "date": "2025-12-12",
            "count": 1
          },
          {
            "date": "2025-12-15",
            "count": 1
          },
          {
            "date": "2025-12-16",
            "count": 2
          },
          {
            "date": "2025-12-17",
            "count": 2
          },
          {
            "date": "2025-12-19",
            "count": 1
          },
          {
            "date": "2025-12-21",
            "count": 2
          },
          {
            "date": "2025-12-23",
            "count": 1
          },
          {
            "date": "2025-12-28",
            "count": 1
          },
          {
            "date": "2025-12-29",
            "count": 1
          },
          {
            "date": "2025-12-30",
            "count": 2
          },
          {
            "date": "2026-01-01",
            "count": 3
          },
          {
            "date": "2026-01-03",
            "count": 1
          },
          {
            "date": "2026-01-05",
            "count": 1
          },
          {
            "date": "2026-01-06",
            "count": 1
          },
          {
            "date": "2026-01-07",
            "count": 2
          },
          {
            "date": "2026-01-08",
            "count": 1
          },
          {
            "date": "2026-01-09",
            "count": 1
          },
          {
            "date": "2026-01-11",
            "count": 1
          },
          {
            "date": "2026-01-13",
            "count": 3
          },
          {
            "date": "2026-01-14",
            "count": 3
          },
          {
            "date": "2026-01-17",
            "count": 2
          },
          {
            "date": "2026-01-18",
            "count": 1
          },
          {
            "date": "2026-01-19",
            "count": 4
          },
          {
            "date": "2026-01-20",
            "count": 2
          },
          {
            "date": "2026-01-22",
            "count": 3
          },
          {
            "date": "2026-01-23",
            "count": 2
          },
          {
            "date": "2026-01-24",
            "count": 2
          },
          {
            "date": "2026-01-26",
            "count": 2
          },
          {
            "date": "2026-01-28",
            "count": 3
          },
          {
            "date": "2026-01-29",
            "count": 1
          },
          {
            "date": "2026-01-30",
            "count": 1
          },
          {
            "date": "2026-01-31",
            "count": 1
          },
          {
            "date": "2026-02-02",
            "count": 4
          },
          {
            "date": "2026-02-03",
            "count": 2
          },
          {
            "date": "2026-02-04",
            "count": 2
          },
          {
            "date": "2026-02-05",
            "count": 2
          },
          {
            "date": "2026-02-06",
            "count": 1
          },
          {
            "date": "2026-02-07",
            "count": 2
          },
          {
            "date": "2026-02-09",
            "count": 2
          },
          {
            "date": "2026-02-11",
            "count": 1
          },
          {
            "date": "2026-02-12",
            "count": 3
          },
          {
            "date": "2026-02-13",
            "count": 2
          },
          {
            "date": "2026-02-14",
            "count": 2
          },
          {
            "date": "2026-02-15",
            "count": 1
          },
          {
            "date": "2026-02-17",
            "count": 3
          },
          {
            "date": "2026-02-18",
            "count": 1
          },
          {
            "date": "2026-02-20",
            "count": 3
          },
          {
            "date": "2026-02-21",
            "count": 1
          },
          {
            "date": "2026-02-22",
            "count": 1
          },
          {
            "date": "2026-02-23",
            "count": 1
          },
          {
            "date": "2026-02-24",
            "count": 2
          },
          {
            "date": "2026-02-26",
            "count": 4
          },
          {
            "date": "2026-02-27",
            "count": 1
          },
          {
            "date": "2026-02-28",
            "count": 2
          },
          {
            "date": "2026-03-01",
            "count": 3
          },
          {
            "date": "2026-03-02",
            "count": 1
          },
          {
            "date": "2026-03-03",
            "count": 1
          },
          {
            "date": "2026-03-04",
            "count": 2
          },
          {
            "date": "2026-03-05",
            "count": 5
          },
          {
            "date": "2026-03-06",
            "count": 2
          },
          {
            "date": "2026-03-07",
            "count": 1
          },
          {
            "date": "2026-03-08",
            "count": 1
          },
          {
            "date": "2026-03-09",
            "count": 2
          },
          {
            "date": "2026-03-10",
            "count": 1
          },
          {
            "date": "2026-03-11",
            "count": 1
          },
          {
            "date": "2026-03-12",
            "count": 3
          },
          {
            "date": "2026-03-13",
            "count": 1
          },
          {
            "date": "2026-03-14",
            "count": 2
          },
          {
            "date": "2026-03-17",
            "count": 2
          },
          {
            "date": "2026-03-18",
            "count": 3
          },
          {
            "date": "2026-03-20",
            "count": 2
          },
          {
            "date": "2026-03-21",
            "count": 1
          },
          {
            "date": "2026-03-22",
            "count": 2
          },
          {
            "date": "2026-03-23",
            "count": 1
          },
          {
            "date": "2026-03-24",
            "count": 3
          },
          {
            "date": "2026-03-25",
            "count": 1
          },
          {
            "date": "2026-03-26",
            "count": 2
          },
          {
            "date": "2026-03-27",
            "count": 4
          },
          {
            "date": "2026-03-29",
            "count": 1
          },
          {
            "date": "2026-03-30",
            "count": 3
          },
          {
            "date": "2026-04-02",
            "count": 2
          },
          {
            "date": "2026-04-03",
            "count": 6
          },
          {
            "date": "2026-04-04",
            "count": 14
          },
          {
            "date": "2026-04-05",
            "count": 7
          },
          {
            "date": "2026-04-06",
            "count": 4
          },
          {
            "date": "2026-04-07",
            "count": 1
          },
          {
            "date": "2026-04-08",
            "count": 4
          },
          {
            "date": "2026-04-09",
            "count": 2
          },
          {
            "date": "2026-04-10",
            "count": 1
          },
          {
            "date": "2026-04-11",
            "count": 1
          },
          {
            "date": "2026-04-12",
            "count": 3
          },
          {
            "date": "2026-04-14",
            "count": 1
          },
          {
            "date": "2026-04-15",
            "count": 3
          },
          {
            "date": "2026-04-16",
            "count": 2
          },
          {
            "date": "2026-04-17",
            "count": 4
          },
          {
            "date": "2026-04-18",
            "count": 2
          },
          {
            "date": "2026-04-19",
            "count": 5
          },
          {
            "date": "2026-04-20",
            "count": 1
          },
          {
            "date": "2026-04-21",
            "count": 2
          },
          {
            "date": "2026-04-22",
            "count": 5
          },
          {
            "date": "2026-04-23",
            "count": 2
          },
          {
            "date": "2026-04-24",
            "count": 1
          },
          {
            "date": "2026-04-26",
            "count": 2
          },
          {
            "date": "2026-04-27",
            "count": 2
          },
          {
            "date": "2026-04-28",
            "count": 4
          },
          {
            "date": "2026-04-29",
            "count": 1
          },
          {
            "date": "2026-04-30",
            "count": 3
          },
          {
            "date": "2026-05-01",
            "count": 2
          },
          {
            "date": "2026-05-03",
            "count": 2
          },
          {
            "date": "2026-05-04",
            "count": 8
          },
          {
            "date": "2026-05-05",
            "count": 1
          },
          {
            "date": "2026-05-06",
            "count": 1
          },
          {
            "date": "2026-05-07",
            "count": 1
          },
          {
            "date": "2026-05-08",
            "count": 3
          },
          {
            "date": "2026-05-09",
            "count": 3
          },
          {
            "date": "2026-05-11",
            "count": 1
          },
          {
            "date": "2026-05-12",
            "count": 5
          },
          {
            "date": "2026-05-13",
            "count": 10
          },
          {
            "date": "2026-05-14",
            "count": 8
          },
          {
            "date": "2026-05-15",
            "count": 6
          },
          {
            "date": "2026-05-17",
            "count": 1
          },
          {
            "date": "2026-05-18",
            "count": 2
          },
          {
            "date": "2026-05-19",
            "count": 3
          },
          {
            "date": "2026-05-20",
            "count": 5
          },
          {
            "date": "2026-05-21",
            "count": 2
          },
          {
            "date": "2026-05-22",
            "count": 1
          },
          {
            "date": "2026-05-23",
            "count": 1
          },
          {
            "date": "2026-05-24",
            "count": 2
          },
          {
            "date": "2026-05-25",
            "count": 1
          },
          {
            "date": "2026-05-26",
            "count": 2
          },
          {
            "date": "2026-05-27",
            "count": 2
          },
          {
            "date": "2026-05-28",
            "count": 1
          },
          {
            "date": "2026-05-29",
            "count": 2
          },
          {
            "date": "2026-05-30",
            "count": 1
          },
          {
            "date": "2026-05-31",
            "count": 4
          },
          {
            "date": "2026-06-01",
            "count": 3
          },
          {
            "date": "2026-06-02",
            "count": 2
          },
          {
            "date": "2026-06-03",
            "count": 4
          },
          {
            "date": "2026-06-04",
            "count": 7
          },
          {
            "date": "2026-06-05",
            "count": 1
          },
          {
            "date": "2026-06-06",
            "count": 5
          },
          {
            "date": "2026-06-07",
            "count": 1
          },
          {
            "date": "2026-06-08",
            "count": 2
          },
          {
            "date": "2026-06-09",
            "count": 2
          },
          {
            "date": "2026-06-11",
            "count": 5
          },
          {
            "date": "2026-06-12",
            "count": 1
          },
          {
            "date": "2026-06-13",
            "count": 1
          },
          {
            "date": "2026-06-14",
            "count": 2
          },
          {
            "date": "2026-06-15",
            "count": 3
          },
          {
            "date": "2026-06-16",
            "count": 3
          },
          {
            "date": "2026-06-17",
            "count": 3
          },
          {
            "date": "2026-06-18",
            "count": 3
          },
          {
            "date": "2026-06-19",
            "count": 1
          },
          {
            "date": "2026-06-20",
            "count": 1
          },
          {
            "date": "2026-06-21",
            "count": 1
          },
          {
            "date": "2026-06-22",
            "count": 4
          },
          {
            "date": "2026-06-23",
            "count": 2
          },
          {
            "date": "2026-06-24",
            "count": 1
          },
          {
            "date": "2026-06-25",
            "count": 1
          },
          {
            "date": "2026-06-26",
            "count": 1
          },
          {
            "date": "2026-06-27",
            "count": 2
          },
          {
            "date": "2026-06-28",
            "count": 5
          },
          {
            "date": "2026-06-29",
            "count": 2
          },
          {
            "date": "2026-06-30",
            "count": 2
          },
          {
            "date": "2026-07-01",
            "count": 5
          },
          {
            "date": "2026-07-06",
            "count": 1
          },
          {
            "date": "2026-07-08",
            "count": 1
          },
          {
            "date": "2026-07-09",
            "count": 1
          },
          {
            "date": "2026-07-12",
            "count": 1
          },
          {
            "date": "2026-07-14",
            "count": 2
          },
          {
            "date": "2026-07-15",
            "count": 1
          },
          {
            "date": "2026-07-16",
            "count": 1
          },
          {
            "date": "2026-07-17",
            "count": 2
          },
          {
            "date": "2026-07-18",
            "count": 1
          },
          {
            "date": "2026-07-19",
            "count": 2
          },
          {
            "date": "2026-07-20",
            "count": 1
          },
          {
            "date": "2026-07-21",
            "count": 2
          },
          {
            "date": "2026-07-22",
            "count": 1
          },
          {
            "date": "2026-07-24",
            "count": 1
          },
          {
            "date": "2026-07-25",
            "count": 2
          },
          {
            "date": "2026-07-27",
            "count": 4
          },
          {
            "date": "2026-07-28",
            "count": 2
          },
          {
            "date": "2026-07-29",
            "count": 1
          },
          {
            "date": "2026-07-30",
            "count": 1
          },
          {
            "date": "2026-07-31",
            "count": 4
          },
          {
            "date": "2026-08-01",
            "count": 2
          },
          {
            "date": "2026-08-02",
            "count": 2
          },
          {
            "date": "2026-08-03",
            "count": 5
          }
        ],
        "complete": false,
        "collected": 1000,
        "total_forks": 2519
      },
      "star_history": null,
      "open_issues_and_prs": 504
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [
        "pkg/analyzer/analyzers/monday/query.graphql",
        "proto/config.proto",
        "proto/credentials.proto",
        "proto/custom_detectors.proto",
        "proto/detector_type.proto",
        "proto/detectors.proto",
        "proto/source_metadata.proto",
        "proto/sources.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 254015,
      "source_files_sampled": 3289,
      "oversized_source_files": 12,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "gitpython",
            "direct": false,
            "version": "3.0.6",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-2f96-g7mh-g2hx",
              "GHSA-2mqj-m65w-jghx",
              "GHSA-3f7w-8rr8-f37f",
              "GHSA-3rp5-jjmw-4wv2",
              "GHSA-539m-9xh6-q6rr",
              "GHSA-6p8h-3wgx-97gf",
              "GHSA-7545-fcxq-7j24",
              "GHSA-94p4-4cq8-9g67",
              "GHSA-956x-8gvw-wg5v",
              "GHSA-cwvm-v4w8-q58c"
            ],
            "fixed_version": "3.1.57",
            "advisory_count": 28,
            "oldest_advisory_days": 1337
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 2,
            "oldest_advisory_days": 14
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-pxq6-2prw-chj9",
              "GHSA-rg2x-37c3-w2rh",
              "GHSA-vp62-88p7-qqf5",
              "GHSA-x744-4wpc-v9h2",
              "GHSA-x86f-5xw2-fm2r",
              "GO-2026-4883",
              "GO-2026-4887",
              "GO-2026-5617",
              "GO-2026-5668",
              "GO-2026-5746"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 10,
            "oldest_advisory_days": 130
          },
          {
            "name": "codecov",
            "direct": false,
            "version": "2.0.15",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-h3qr-fjhm-jphw",
              "PYSEC-2022-238"
            ],
            "fixed_version": "2.0.16",
            "advisory_count": 2,
            "oldest_advisory_days": 1483
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.1.0",
            "severity": "low",
            "ecosystem": "go",
            "cvss_score": 3.7,
            "advisory_ids": [
              "GHSA-fw7p-63qq-7hpr",
              "GO-2026-4503"
            ],
            "fixed_version": "1.1.1",
            "advisory_count": 2,
            "oldest_advisory_days": 168
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 28
          },
          {
            "name": "golang.org/x/net",
            "direct": true,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 21
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 21
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.6",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 8
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.7.8",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5320"
            ],
            "fixed_version": "1.7.17",
            "advisory_count": 1,
            "oldest_advisory_days": 28
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.43.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5158"
            ],
            "fixed_version": "1.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 11
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 1,
          "unknown": 6,
          "critical": 2,
          "moderate": 1
        },
        "advisory_count": 50,
        "affected_count": 11,
        "assessed_count": 312,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 3
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "cloud.google.com/go/secretmanager",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.16.0"
        },
        {
          "name": "cloud.google.com/go/storage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.56.1"
        },
        {
          "name": "github.com/BobuSumisu/aho-corasick",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.3"
        },
        {
          "name": "github.com/TheZeroSlave/zapsentry",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.0"
        },
        {
          "name": "github.com/adrg/strutil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.1"
        },
        {
          "name": "github.com/alecthomas/kingpin/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        },
        {
          "name": "github.com/avast/apkparser",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260423123151-7fcaee440f68"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.32.31"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/credentials",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.30"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/feature/s3/manager",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.22.35"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/s3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.106.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/sns",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/sts",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.45.0"
        },
        {
          "name": "github.com/aws/smithy-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.27.3"
        },
        {
          "name": "github.com/aymanbagabas/go-osc52",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.1"
        },
        {
          "name": "github.com/bill-rich/go-syslog",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20220413021637-49edb52a574c"
        },
        {
          "name": "github.com/bradleyfalzon/ghinstallation/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.16.0"
        },
        {
          "name": "github.com/brianvoe/gofakeit/v7",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v7.6.0"
        },
        {
          "name": "github.com/charmbracelet/bubbles",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.18.0"
        },
        {
          "name": "github.com/charmbracelet/bubbletea",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.6"
        },
        {
          "name": "github.com/charmbracelet/glamour",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.10.0"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1-0.20250404203927-76690c660834"
        },
        {
          "name": "github.com/couchbase/gocb/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.11.0"
        },
        {
          "name": "github.com/crewjam/rfc5424",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.0"
        },
        {
          "name": "github.com/csnewman/dextk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/dustin/go-humanize",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.1"
        },
        {
          "name": "github.com/elastic/go-elasticsearch/v8",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v8.17.1"
        },
        {
          "name": "github.com/envoyproxy/protoc-gen-validate",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/fatih/color",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.18.0"
        },
        {
          "name": "github.com/felixge/fgprof",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.5"
        },
        {
          "name": "github.com/gabriel-vasile/mimetype",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.10"
        },
        {
          "name": "github.com/getsentry/sentry-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.32.0"
        },
        {
          "name": "github.com/go-errors/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1"
        },
        {
          "name": "github.com/go-git/go-git/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.19.1"
        },
        {
          "name": "github.com/go-logr/logr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.3"
        },
        {
          "name": "github.com/go-logr/zapr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/go-redis/redis",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v6.15.9+incompatible"
        },
        {
          "name": "github.com/go-sql-driver/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/gobwas/glob",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.3"
        },
        {
          "name": "github.com/golang-jwt/jwt/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.2.3"
        },
        {
          "name": "github.com/google/go-cmp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.0"
        },
        {
          "name": "github.com/google/go-containerregistry",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.6"
        },
        {
          "name": "github.com/google/go-github/v67",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v67.0.0"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/googleapis/gax-go/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.16.0"
        },
        {
          "name": "github.com/hashicorp/go-retryablehttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.8"
        },
        {
          "name": "github.com/hashicorp/golang-lru/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.7"
        },
        {
          "name": "github.com/jedib0t/go-pretty/v6",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v6.6.8"
        },
        {
          "name": "github.com/jlaffaye/ftp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.0"
        },
        {
          "name": "github.com/joho/godotenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1"
        },
        {
          "name": "github.com/jpillora/overseer",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.6"
        },
        {
          "name": "github.com/k0kubun/go-ansi",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20180517002512-3bf9e2903213"
        },
        {
          "name": "github.com/klauspost/pgzip",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.6"
        },
        {
          "name": "github.com/kylelemons/godebug",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/lestrrat-go/jwx/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.12"
        },
        {
          "name": "github.com/lib/pq",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.9"
        },
        {
          "name": "github.com/lrstanley/bubblezone",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250404061050-e13639e27357"
        },
        {
          "name": "github.com/marusama/semaphore/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.5.0"
        },
        {
          "name": "github.com/mattn/go-isatty",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.20"
        },
        {
          "name": "github.com/mholt/archives",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20241216060121-23e0af8fe73d"
        },
        {
          "name": "github.com/microsoft/go-mssqldb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.2"
        },
        {
          "name": "github.com/mitchellh/go-ps",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/moby/moby/client",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.1"
        },
        {
          "name": "github.com/muesli/reflow",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/patrickmn/go-cache",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.0+incompatible"
        },
        {
          "name": "github.com/paulbellamy/ratecounter",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.0"
        },
        {
          "name": "github.com/pkg/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.5"
        },
        {
          "name": "github.com/rabbitmq/amqp091-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/repeale/fp-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.11.1"
        },
        {
          "name": "github.com/sassoftware/go-rpmutils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.0"
        },
        {
          "name": "github.com/schollz/progressbar/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.17.1"
        },
        {
          "name": "github.com/sendgrid/sendgrid-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.16.1+incompatible"
        },
        {
          "name": "github.com/sergi/go-diff",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.2-0.20230802210424-5b0b94c5c0d3"
        },
        {
          "name": "github.com/shuheiktgw/go-travis",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.1"
        },
        {
          "name": "github.com/shurcooL/githubv4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260209031235-2402fdf4a9ed"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/elasticsearch",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/mongodb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/mssql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/postgres",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.1-0.20260423004847-9fc0246c3859"
        },
        {
          "name": "github.com/trufflesecurity/disk-buffer-reader",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.1"
        },
        {
          "name": "github.com/trufflesecurity/ldap-verify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260401205135-1cad02b26426"
        },
        {
          "name": "github.com/wasilibs/go-re2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.0"
        },
        {
          "name": "github.com/xo/dburl",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.23.8"
        },
        {
          "name": "gitlab.com/gitlab-org/api/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.12.0"
        },
        {
          "name": "go.mongodb.org/mongo-driver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.17.7"
        },
        {
          "name": "go.uber.org/automaxprocs",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "go.uber.org/mock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.27.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.0"
        },
        {
          "name": "golang.org/x/net",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.55.0"
        },
        {
          "name": "golang.org/x/oauth2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.34.0"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "golang.org/x/text",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.37.0"
        },
        {
          "name": "golang.org/x/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.14.0"
        },
        {
          "name": "google.golang.org/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.259.0"
        },
        {
          "name": "google.golang.org/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11"
        },
        {
          "name": "gopkg.in/h2non/gock.v1",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.2"
        },
        {
          "name": "gopkg.in/yaml.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "pault.ag/go/debian",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.18.0"
        },
        {
          "name": "pgregory.net/rapid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "sigs.k8s.io/yaml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "cloud.google.com/go/secretmanager",
            "direct": true,
            "version": "v1.16.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/storage",
            "direct": true,
            "version": "v1.56.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/adrg/strutil",
            "direct": true,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/kingpin/v2",
            "direct": true,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/avast/apkparser",
            "direct": true,
            "version": "v0.0.0-20260423123151-7fcaee440f68",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "v1.32.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": true,
            "version": "v1.19.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/s3/manager",
            "direct": true,
            "version": "v1.22.35",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": true,
            "version": "v1.106.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sns",
            "direct": true,
            "version": "v1.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": true,
            "version": "v1.45.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": true,
            "version": "v1.27.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52",
            "direct": true,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bill-rich/go-syslog",
            "direct": true,
            "version": "v0.0.0-20220413021637-49edb52a574c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bobusumisu/aho-corasick",
            "direct": true,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bradleyfalzon/ghinstallation/v2",
            "direct": true,
            "version": "v2.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/brianvoe/gofakeit/v7",
            "direct": true,
            "version": "v7.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbles",
            "direct": true,
            "version": "v0.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbletea",
            "direct": true,
            "version": "v1.3.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/glamour",
            "direct": true,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/lipgloss",
            "direct": true,
            "version": "v1.1.1-0.20250404203927-76690c660834",
            "ecosystem": "go"
          },
          {
            "name": "github.com/couchbase/gocb/v2",
            "direct": true,
            "version": "v2.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/crewjam/rfc5424",
            "direct": true,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/csnewman/dextk",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": true,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/elastic/go-elasticsearch/v8",
            "direct": true,
            "version": "v8.17.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/protoc-gen-validate",
            "direct": true,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": true,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/fgprof",
            "direct": true,
            "version": "v0.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gabriel-vasile/mimetype",
            "direct": true,
            "version": "v1.4.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/getsentry/sentry-go",
            "direct": true,
            "version": "v0.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-errors/errors",
            "direct": true,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": true,
            "version": "v5.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": true,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": true,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-redis/redis",
            "direct": true,
            "version": "v6.15.9+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-sql-driver/mysql",
            "direct": true,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobwas/glob",
            "direct": true,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": true,
            "version": "v5.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": true,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-containerregistry",
            "direct": true,
            "version": "v0.20.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-github/v67",
            "direct": true,
            "version": "v67.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": true,
            "version": "v2.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-retryablehttp",
            "direct": true,
            "version": "v0.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": true,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jedib0t/go-pretty/v6",
            "direct": true,
            "version": "v6.6.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jlaffaye/ftp",
            "direct": true,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/joho/godotenv",
            "direct": true,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/k0kubun/go-ansi",
            "direct": true,
            "version": "v0.0.0-20180517002512-3bf9e2903213",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/pgzip",
            "direct": true,
            "version": "v1.2.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/jwx/v3",
            "direct": true,
            "version": "v3.0.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lib/pq",
            "direct": true,
            "version": "v1.10.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lrstanley/bubblezone",
            "direct": true,
            "version": "v0.0.0-20250404061050-e13639e27357",
            "ecosystem": "go"
          },
          {
            "name": "github.com/marusama/semaphore/v2",
            "direct": true,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": true,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mholt/archives",
            "direct": true,
            "version": "v0.0.0-20241216060121-23e0af8fe73d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-mssqldb",
            "direct": true,
            "version": "v1.8.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-ps",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/client",
            "direct": true,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/reflow",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/patrickmn/go-cache",
            "direct": true,
            "version": "v2.1.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/paulbellamy/ratecounter",
            "direct": true,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": true,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.20.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rabbitmq/amqp091-go",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/repeale/fp-go",
            "direct": true,
            "version": "v0.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sassoftware/go-rpmutils",
            "direct": true,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/schollz/progressbar/v3",
            "direct": true,
            "version": "v3.17.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sendgrid/sendgrid-go",
            "direct": true,
            "version": "v3.16.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergi/go-diff",
            "direct": true,
            "version": "v1.3.2-0.20230802210424-5b0b94c5c0d3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shuheiktgw/go-travis",
            "direct": true,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shurcool/githubv4",
            "direct": true,
            "version": "v0.0.0-20260209031235-2402fdf4a9ed",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/elasticsearch",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/mongodb",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/mssql",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/mysql",
            "direct": true,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/postgres",
            "direct": true,
            "version": "v0.42.1-0.20260423004847-9fc0246c3859",
            "ecosystem": "go"
          },
          {
            "name": "github.com/thezeroslave/zapsentry",
            "direct": true,
            "version": "v1.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/trufflesecurity/disk-buffer-reader",
            "direct": true,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/trufflesecurity/ldap-verify",
            "direct": true,
            "version": "v0.0.0-20260401205135-1cad02b26426",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wasilibs/go-re2",
            "direct": true,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/dburl",
            "direct": true,
            "version": "v0.23.8",
            "ecosystem": "go"
          },
          {
            "name": "gitlab.com/gitlab-org/api/client-go",
            "direct": true,
            "version": "v1.12.0",
            "ecosystem": "go"
          },
          {
            "name": "go.mongodb.org/mongo-driver",
            "direct": true,
            "version": "v1.17.7",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/automaxprocs",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/mock",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.27.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": true,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": true,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": true,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": true,
            "version": "v0.259.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": true,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/h2non/gock.v1",
            "direct": true,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": true,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "pault.ag/go/debian",
            "direct": true,
            "version": "v0.18.0",
            "ecosystem": "go"
          },
          {
            "name": "pgregory.net/rapid",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": true,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.121.6",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.18.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth/oauth2adapt",
            "direct": false,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/iam",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/monitoring",
            "direct": false,
            "version": "v1.24.3",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/chroma/v2",
            "direct": false,
            "version": "v2.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/units",
            "direct": false,
            "version": "v0.0.0-20211218093645-b94a6e3cc137",
            "ecosystem": "go"
          },
          {
            "name": "github.com/andybalholm/brotli",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/atotto/clipboard",
            "direct": false,
            "version": "v0.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.32",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.32",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.33.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52/v2",
            "direct": false,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymerick/douceur",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ntlmssp",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azuread/microsoft-authentication-library-for-go",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bodgit/plumbing",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bodgit/sevenzip",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bodgit/windows",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.2.3-0.20250311203215-f60798e515dc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/cellbuf",
            "direct": false,
            "version": "v0.0.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/exp/slice",
            "direct": false,
            "version": "v0.0.0-20250327172914-2fdc97757edf",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cncf/xds/go",
            "direct": false,
            "version": "v0.0.0-20251210132809-ee656c7534f5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/stargz-snapshotter/estargz",
            "direct": false,
            "version": "v0.16.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/couchbase/gocbcore/v10",
            "direct": false,
            "version": "v10.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/couchbase/gocbcoreps",
            "direct": false,
            "version": "v0.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/couchbase/goprotostellar",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/couchbaselabs/gocbconnstr/v2",
            "direct": false,
            "version": "v2.0.0-20240607131231-fb385523de28",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/dockercfg",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/zstd",
            "direct": false,
            "version": "v1.5.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
            "direct": false,
            "version": "v4.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dlclark/regexp2",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v29.3.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/distribution",
            "direct": false,
            "version": "v2.8.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker-credential-helpers",
            "direct": false,
            "version": "v0.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dsnet/compress",
            "direct": false,
            "version": "v0.0.2-0.20230904184137-39efe44ab707",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/elastic/elastic-transport-go/v8",
            "direct": false,
            "version": "v8.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emirpasic/gods",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/go-control-plane/envoy",
            "direct": false,
            "version": "v1.36.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikgeiser/coninput",
            "direct": false,
            "version": "v0.0.0-20211004153227-1c3628e74d0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-asn1-ber/asn1-ber",
            "direct": false,
            "version": "v1.5.8-0.20250403174932-29230038a667",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg",
            "direct": false,
            "version": "v1.5.1-0.20230307220236-3a3c6141e376",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-json",
            "direct": false,
            "version": "v0.10.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofrs/flock",
            "direct": false,
            "version": "v0.12.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v4",
            "direct": false,
            "version": "v4.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/civil",
            "direct": false,
            "version": "v0.0.0-20220223132316-b832511892a9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/sqlexp",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/groupcache",
            "direct": false,
            "version": "v0.0.0-20241129210726-2c02b8208cf8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/snappy",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-github/v72",
            "direct": false,
            "version": "v72.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-querystring",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20240227163752-401108e1b7e7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp",
            "direct": false,
            "version": "v1.30.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/css",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/go-grpc-middleware",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/h2non/parth",
            "direct": false,
            "version": "v0.0.0-20190131123155-b4df798d6542",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-context",
            "direct": false,
            "version": "v0.0.0-20150711004518-d14ea06fba99",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jpillora/s3",
            "direct": false,
            "version": "v1.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kevinburke/ssh_config",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kjk/lzma",
            "direct": false,
            "version": "v0.0.0-20161016003348-3fd93898850d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/blackmagic",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/httpcc",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/httprc/v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/option",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lestrrat-go/option/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20260330125221-c963978e514e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-localereader",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microcosm-cc/bluemonday",
            "direct": false,
            "version": "v1.0.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/colorstring",
            "direct": false,
            "version": "v0.0.0-20190213212951-d06e56a500db",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/go-archive",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/moby/api",
            "direct": false,
            "version": "v1.54.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/patternmatcher",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/montanaflynn/stats",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/ansi",
            "direct": false,
            "version": "v0.0.0-20230316100256-276c6243b2f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/termenv",
            "direct": false,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nwaples/rardecode/v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo",
            "direct": false,
            "version": "v1.16.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pierrec/lz4/v4",
            "direct": false,
            "version": "v4.1.21",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pjbgf/sha1cd",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.15.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/protonmail/go-crypto",
            "direct": false,
            "version": "v1.1.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sahilm/fuzzy",
            "direct": false,
            "version": "v0.1.1-0.20230530133925-c48e322e2a8f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sendgrid/rest",
            "direct": false,
            "version": "v2.6.9+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": false,
            "version": "v4.26.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shurcool/graphql",
            "direct": false,
            "version": "v0.0.0-20230722043721-ed46e5a46466",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/skeema/knownhosts",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sorairolake/lzip-go",
            "direct": false,
            "version": "v0.3.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spiffe/go-spiffe/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/starry-s/zip",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tetratelabs/wazero",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/therootcompany/xz",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/trufflesecurity/touchfile",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ulikunitz/xz",
            "direct": false,
            "version": "v0.5.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vbatts/tar-split",
            "direct": false,
            "version": "v0.12.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wasilibs/wazero-helpers",
            "direct": false,
            "version": "v0.0.0-20240620070341-3dff1577cd52",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xanzy/ssh-agent",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xdg-go/pbkdf2",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xdg-go/scram",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xdg-go/stringprep",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xhit/go-str2duration/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xi2/xz",
            "direct": false,
            "version": "v0.0.0-20171230120015-48954b6210f8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/youmark/pkcs8",
            "direct": false,
            "version": "v0.0.0-20240726163527-a2c0da244d78",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark-emoji",
            "direct": false,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/detectors/gcp",
            "direct": false,
            "version": "v1.39.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.62.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.68.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go4.org",
            "direct": false,
            "version": "v0.0.0-20230225012048-214862532bf5",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "v0.0.0-20251202230838-ff82c1b0f217",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20251202230838-ff82c1b0f217",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20251222181119-0a764e51fe1b",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/warnings.v0",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "pault.ag/go/topsort",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "codecov",
            "direct": false,
            "version": "2.0.15",
            "ecosystem": "pypi"
          },
          {
            "name": "gitpython",
            "direct": false,
            "version": "3.0.6",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-cov",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "trufflehogregexes",
            "direct": false,
            "version": "0.0.7",
            "ecosystem": "pypi"
          },
          {
            "name": "unittest2",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 312,
        "direct_count": 106,
        "indirect_count": 206
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 244,
        "merged_prs": 3247,
        "open_issues": 260,
        "closed_ratio": 0.733,
        "closed_issues": 714,
        "closed_unmerged_prs": 653
      },
      "bus_factor": 5,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "lonmarsDev",
          "commits": 462,
          "avatar_url": "https://avatars.githubusercontent.com/u/28698778?v=4"
        },
        {
          "type": "User",
          "login": "roxanne-tampus",
          "commits": 441,
          "avatar_url": "https://avatars.githubusercontent.com/u/51393035?v=4"
        },
        {
          "type": "User",
          "login": "ahrav",
          "commits": 381,
          "avatar_url": "https://avatars.githubusercontent.com/u/21311841?v=4"
        },
        {
          "type": "User",
          "login": "dustin-decker",
          "commits": 294,
          "avatar_url": "https://avatars.githubusercontent.com/u/6031416?v=4"
        },
        {
          "type": "User",
          "login": "mcastorina",
          "commits": 219,
          "avatar_url": "https://avatars.githubusercontent.com/u/5395814?v=4"
        },
        {
          "type": "User",
          "login": "kashifkhan0771",
          "commits": 171,
          "avatar_url": "https://avatars.githubusercontent.com/u/70996046?v=4"
        },
        {
          "type": "User",
          "login": "dmarquero",
          "commits": 160,
          "avatar_url": "https://avatars.githubusercontent.com/u/11734378?v=4"
        },
        {
          "type": "User",
          "login": "rgmz",
          "commits": 137,
          "avatar_url": "https://avatars.githubusercontent.com/u/32133502?v=4"
        },
        {
          "type": "User",
          "login": "bill-rich",
          "commits": 127,
          "avatar_url": "https://avatars.githubusercontent.com/u/3035677?v=4"
        },
        {
          "type": "User",
          "login": "rosecodym",
          "commits": 124,
          "avatar_url": "https://avatars.githubusercontent.com/u/7896110?v=4"
        }
      ],
      "contributors_sampled": 98,
      "top_contributor_share": 0.129
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "codeql-analysis.yml",
        "detector-corpora-test.yml",
        "detector-tests.yml",
        "lint.yml",
        "performance.yml",
        "release-bot.yml",
        "release.yml",
        "secrets.yml",
        "smoke.yml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 10 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 7,
            "reason": "dependency not pinned by hash detected -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "14 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "24c98ca20e421a6807518f79c5cdd063400774f2",
        "ran_at": "2026-08-05T02:39:08Z",
        "aggregate_score": 7.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "recent_prs": {
        "merged_7d": 2,
        "decided_7d": 5,
        "merged_30d": 11,
        "authors_30d": 10,
        "decided_30d": 16,
        "sample_size": 60,
        "window_days": 30,
        "sample_exhausted": false,
        "authors_probed_30d": 10,
        "newcomer_merged_30d": 0,
        "bot_prs_excluded_30d": 3,
        "newcomer_authors_30d": 2,
        "newcomer_decided_30d": 4
      },
      "ci_last_run_at": "2026-08-04T17:20:56Z",
      "oldest_open_prs": [
        {
          "number": 1129,
          "created_at": "2023-02-27T09:08:04Z",
          "last_comment_at": "2023-03-28T16:33:56Z",
          "last_comment_author": "dustin-decker"
        },
        {
          "number": 1488,
          "created_at": "2023-07-13T13:40:13Z",
          "last_comment_at": "2023-07-20T11:43:29Z",
          "last_comment_author": "joe-make-infrastructure"
        },
        {
          "number": 1551,
          "created_at": "2023-07-26T05:26:41Z",
          "last_comment_at": "2023-08-01T21:27:45Z",
          "last_comment_author": "dustin-decker"
        },
        {
          "number": 1643,
          "created_at": "2023-08-18T20:53:39Z",
          "last_comment_at": "2025-08-06T10:56:51Z",
          "last_comment_author": "kashifkhan0771"
        },
        {
          "number": 2236,
          "created_at": "2023-12-16T19:28:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2276,
          "created_at": "2024-01-07T23:39:59Z",
          "last_comment_at": "2024-12-25T15:55:37Z",
          "last_comment_author": "rgmz"
        },
        {
          "number": 2302,
          "created_at": "2024-01-12T22:51:51Z",
          "last_comment_at": "2024-01-16T15:43:12Z",
          "last_comment_author": "zricethezav"
        },
        {
          "number": 2380,
          "created_at": "2024-02-05T02:06:46Z",
          "last_comment_at": "2025-07-08T11:07:30Z",
          "last_comment_author": "kashifkhan0771"
        },
        {
          "number": 2633,
          "created_at": "2024-03-27T17:41:00Z",
          "last_comment_at": "2025-07-09T10:44:01Z",
          "last_comment_author": "kashifkhan0771"
        },
        {
          "number": 2647,
          "created_at": "2024-03-29T22:48:12Z",
          "last_comment_at": "2024-04-01T14:09:18Z",
          "last_comment_author": "ahrav"
        },
        {
          "number": 2656,
          "created_at": "2024-04-02T19:37:51Z",
          "last_comment_at": "2024-04-04T14:37:03Z",
          "last_comment_author": "rgmz"
        },
        {
          "number": 2676,
          "created_at": "2024-04-05T17:32:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2696,
          "created_at": "2024-04-11T13:35:06Z",
          "last_comment_at": "2025-04-22T15:03:37Z",
          "last_comment_author": "ankushgoel27"
        },
        {
          "number": 2725,
          "created_at": "2024-04-20T17:47:07Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2805,
          "created_at": "2024-05-08T01:54:26Z",
          "last_comment_at": "2024-05-08T13:26:23Z",
          "last_comment_author": "rgmz"
        },
        {
          "number": 2827,
          "created_at": "2024-05-10T20:19:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2979,
          "created_at": "2024-06-17T09:48:20Z",
          "last_comment_at": "2025-06-13T13:16:32Z",
          "last_comment_author": "McPatate"
        },
        {
          "number": 3052,
          "created_at": "2024-07-07T23:45:50Z",
          "last_comment_at": "2024-07-14T20:56:48Z",
          "last_comment_author": "CLAassistant"
        },
        {
          "number": 3081,
          "created_at": "2024-07-19T03:11:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3084,
          "created_at": "2024-07-21T22:36:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-08-04T17:15:57Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 392,
          "created_at": "2022-04-13T16:56:48Z",
          "last_comment_at": "2022-04-13T23:30:25Z",
          "last_comment_author": "dustin-decker"
        },
        {
          "number": 628,
          "created_at": "2022-06-21T18:34:53Z",
          "last_comment_at": "2023-08-22T11:49:40Z",
          "last_comment_author": "svennergr"
        },
        {
          "number": 674,
          "created_at": "2022-07-27T07:45:12Z",
          "last_comment_at": "2023-05-02T18:04:57Z",
          "last_comment_author": "nyanshak"
        },
        {
          "number": 716,
          "created_at": "2022-08-16T08:12:01Z",
          "last_comment_at": "2023-08-21T16:16:23Z",
          "last_comment_author": "itoffshore"
        },
        {
          "number": 769,
          "created_at": "2022-09-01T17:44:05Z",
          "last_comment_at": "2024-06-07T09:02:52Z",
          "last_comment_author": "IAMTHAT-IAM"
        },
        {
          "number": 813,
          "created_at": "2022-09-21T21:31:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 833,
          "created_at": "2022-10-03T12:59:37Z",
          "last_comment_at": "2023-02-03T09:03:33Z",
          "last_comment_author": "Fenrisfulsur"
        },
        {
          "number": 847,
          "created_at": "2022-10-13T20:05:09Z",
          "last_comment_at": "2022-11-10T10:50:33Z",
          "last_comment_author": "marchenko1985"
        },
        {
          "number": 849,
          "created_at": "2022-10-14T18:05:34Z",
          "last_comment_at": "2022-11-11T04:51:30Z",
          "last_comment_author": "dinvlad"
        },
        {
          "number": 951,
          "created_at": "2022-12-02T19:20:16Z",
          "last_comment_at": "2022-12-16T14:41:33Z",
          "last_comment_author": "tbenthompson"
        },
        {
          "number": 965,
          "created_at": "2022-12-08T10:57:34Z",
          "last_comment_at": "2025-07-09T07:39:10Z",
          "last_comment_author": "kashifkhan0771"
        },
        {
          "number": 1019,
          "created_at": "2023-01-13T16:43:29Z",
          "last_comment_at": "2025-01-14T14:20:54Z",
          "last_comment_author": "xtermi2"
        },
        {
          "number": 1082,
          "created_at": "2023-02-08T10:02:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1152,
          "created_at": "2023-03-03T17:28:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1177,
          "created_at": "2023-03-13T15:06:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1198,
          "created_at": "2023-03-20T17:23:39Z",
          "last_comment_at": "2025-07-09T07:56:50Z",
          "last_comment_author": "kashifkhan0771"
        },
        {
          "number": 1239,
          "created_at": "2023-04-05T16:53:18Z",
          "last_comment_at": "2024-05-07T09:15:04Z",
          "last_comment_author": "beeb"
        },
        {
          "number": 1263,
          "created_at": "2023-04-17T11:43:29Z",
          "last_comment_at": "2023-07-11T23:45:24Z",
          "last_comment_author": "dinvlad"
        },
        {
          "number": 1309,
          "created_at": "2023-05-01T13:48:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1311,
          "created_at": "2023-05-01T15:04:43Z",
          "last_comment_at": "2024-10-15T06:14:56Z",
          "last_comment_author": "CameronLonsdale"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/trufflesecurity/trufflehog",
    "host": "github.com",
    "name": "trufflehog",
    "owner": "trufflesecurity"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "exceptional",
      "name": "Overall health",
      "note": "The weighted overall 88 is calibrated to 98 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 88,
            "calibrated": 98,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 98,
      "inputs": {
        "security": 74,
        "vitality": 99,
        "community": 95,
        "governance": 83,
        "calibration": "2026-08-02",
        "engineering": 92,
        "ai_readiness": 78,
        "weighted_overall_raw": 88
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "exceptional",
        "name": "Vitality",
        "value": 99,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "exceptional",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "commits_last_year": 362,
              "human_commit_share": 0.93,
              "days_since_last_push": 0,
              "active_weeks_last_year": 51
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "51/52 weeks with commits",
                "points": 35.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 51
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "362 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 362
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v3.96.0",
              "releases_from_tags": false,
              "days_since_latest_release": 11,
              "mean_days_between_releases": 10.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 11 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~10.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 10.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "exceptional",
        "name": "Community & Adoption",
        "value": 95,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "exceptional",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "forks": 2519,
              "stars": 27307,
              "watchers": 204,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "27,307 stars",
                "points": 60,
                "status": "met",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 27307
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2,519 forks",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2519
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "204 watchers",
                "points": 12.8,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 204
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": 3,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [
                "goreportcard.com",
                "shields.io"
              ],
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (AGPL-3.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "AGPL-3.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "excellent",
        "name": "Sustainability & Governance",
        "value": 83,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "bus_factor": 5,
              "contributors_sampled": 98,
              "top_contributor_share": 0.129
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "5 contributor(s) cover half of all commits",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 13% of commits",
                "points": 19.6,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 13
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "98 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 98
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "merged_prs": 3247,
              "open_issues": 260,
              "closed_issues": 714,
              "prs_merged_7d": 2,
              "prs_decided_7d": 5,
              "prs_merged_30d": 11,
              "prs_decided_30d": 16,
              "issue_closed_ratio": 0.733,
              "closed_unmerged_prs": 653,
              "first_time_authors_30d": 2,
              "first_time_prs_merged_30d": 0,
              "first_time_prs_decided_30d": 4
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "73% of issues closed",
                "points": 30.8,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 73
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "3247/3900 decided PRs merged",
                "points": 25,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 3247,
                      "decided": 3900
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "0/4 first-time contributors' PRs merged in 30d",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "newcomer_prs_merged",
                    "params": {
                      "days": 30,
                      "merged": 0,
                      "decided": 4
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "followers": 825,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "trufflesecurity",
              "public_repos": 53,
              "account_age_days": 1994
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "825 followers of trufflesecurity",
                "points": 21,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 825,
                      "login": "trufflesecurity"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "53 public repos, account ~5 yr old",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 53
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 5
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/trufflesecurity/trufflehog/v3"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 11
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 11 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "349 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 349
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 92,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "exceptional",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "10 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 16,
                "status": "met",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "secret",
                "trufflehog",
                "credentials",
                "security",
                "devsecops",
                "dynamic-analysis",
                "security-tools",
                "secrets",
                "verification",
                "secret-management",
                "precommit",
                "scanning"
              ],
              "has_wiki": false,
              "homepage": "https://trufflesecurity.com",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://trufflesecurity.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "12 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 74,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "14 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 312 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 312
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "source": "osv",
              "advisories": 50,
              "affected_packages": 11,
              "assessed_packages": 312,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 2, high 1, moderate 1, low 1, unknown 6",
              "direct_affected_packages": 3
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "3 affected: golang.org/x/crypto v0.52.0 (unknown), golang.org/x/net v0.55.0 (unknown), golang.org/x/text v0.37.0 (unknown)",
                "points": 23.1,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 3,
                      "packages": "golang.org/x/crypto v0.52.0 (unknown), golang.org/x/net v0.55.0 (unknown), golang.org/x/text v0.37.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 312,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 7
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.978,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "91 of 93 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 91,
                      "sampled": 93
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "exceptional",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.11,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.06
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 11,
                "status": "met",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "11 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 11,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "6 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 7,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 254015,
              "source_files_sampled": 3289,
              "oversized_source_files": 12
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "12/3289 source files over 60KB",
                "points": 54.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 3289,
                      "oversized": 12
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "pkg/analyzer/analyzers/monday/query.graphql",
                "proto/config.proto",
                "proto/credentials.proto",
                "proto/custom_detectors.proto",
                "proto/detector_type.proto",
                "proto/detectors.proto",
                "proto/source_metadata.proto",
                "proto/sources.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "pkg/analyzer/analyzers/monday/query.graphql, proto/config.proto, proto/credentials.proto, proto/custom_detectors.proto, proto/detector_type.proto, proto/detectors.proto, proto/source_metadata.proto, proto/sources.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "pkg/analyzer/analyzers/monday/query.graphql, proto/config.proto, proto/credentials.proto, proto/custom_detectors.proto, proto/detector_type.proto, proto/detectors.proto, proto/source_metadata.proto, proto/sources.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "application",
        "library"
      ],
      "labels": [
        "tui",
        "library"
      ],
      "scores": {
        "tui": 4,
        "library": 6,
        "application": 9,
        "network-service": 3
      },
      "primary": "tui",
      "evidence": [
        {
          "tier": "structure",
          "label": "application",
          "source": "tree.go_main",
          "weight": 5
        },
        {
          "tier": "structure",
          "label": "application",
          "source": "tree.goreleaser",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "tui",
          "source": "dep:github.com/charmbracelet/bubbletea",
          "weight": 4
        },
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:go",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "library",
          "source": "tree.go_importable",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "network-service",
          "source": "api_schema",
          "weight": 3
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-05T02:39:42.139899Z",
  "schema_version": "0.31.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/trufflesecurity/trufflehog.svg",
  "full_name": "trufflesecurity/trufflehog",
  "license_state": "standard",
  "license_spdx": "AGPL-3.0"
}