coolify-terraform / terraform-provider-coolify

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

Повний розв'язаний набір залежностей із графа залежностей GitHub: 11 прямих і 92 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 103 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 6 мають відомі сповіщення, з них 0 прямі.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

{
  "data": {
    "repo": {
      "topics": [
        "coolify",
        "devops",
        "golang",
        "infrastructure-as-code",
        "paas",
        "self-hosted",
        "terraform",
        "terraform-provider"
      ],
      "is_fork": false,
      "size_kb": 5287,
      "has_wiki": false,
      "homepage": "https://github.com/coolify-terraform/terraform-provider-coolify",
      "languages": {
        "Go": 2378570,
        "Shell": 45592,
        "Python": 108703,
        "Makefile": 14489,
        "Go Template": 174647
      },
      "pushed_at": "2026-07-18T23:12:11Z",
      "created_at": "2026-05-09T04:57:57Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T09:05:15Z",
      "description": "Terraform provider for Coolify — manage 33 resources, 44 data sources, 950+ tests. Self-hosted PaaS as code.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MPL-2.0",
      "default_branch": "main",
      "license_spdx_raw": "MPL-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://github.com/coolify-terraform/terraform-provider-coolify",
      "name": null,
      "type": "Organization",
      "login": "coolify-terraform",
      "company": null,
      "location": "San Francisco, CA",
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/287121949?v=4",
      "created_at": "2026-05-23T02:33:32Z",
      "is_verified": null,
      "public_repos": 2,
      "account_age_days": 62
    },
    "license": {
      "state": "standard",
      "spdx_id": "MPL-2.0",
      "raw_spdx": "MPL-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2026-07-18T13:02:17Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-06-26T16:44:15Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-06-25T00:03:50Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-06-13T19:38:26Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-06-03T21:24:39Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2026-06-02T13:17:29Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-06-01T15:01:39Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-06-01T13:42:27Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-05-31T05:21:34Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "ac54e9d5fb1d079e8631b242d8973d58a73567d1",
          "body": "Bumps the actions group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` |\n`7.0.0` |\n|\n[actions/upload-code-coverage](https://github.com/actions/upload-code-coverage)\n| `1.3.0` | `1.4.0` |\n| [github/codeql-action/init](h\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the actions group with 5 updates (#584)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-18T23:12:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f18eacc23dfcf3731883330596b42cffbabf703b",
          "body": "…n the go-minor group (#583)\n\nBumps the go-minor group with 1 update:\n[github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi).\n\nUpdates `github.com/pb33f/libopenapi` from 0.38.6 to 0.38.7\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/pb33f/libo\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump github.com/pb33f/libopenapi from 0.38.6 to 0.38.7 i…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-18T22:12:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6eecd8758dd4e1d604a19e07317a2130dd33845f",
          "body": "Auto-cleanup of `RELEASE_NOTES.md` after v0.1.8 release.\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: remove release notes override (#582)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-07-18T13:12:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74d5f1f4cecf2b970445e782bb4da3df2a1a3e9c",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.1.8](https://github.com/coolify-terraform/terraform-provider-coolify/compare/v0.1.7...v0.1.8)\n(2026-07-18)\n\n\n### Bug Fixes\n\n* application webhook secrets, import safety, seed fields, docs\n([#579](https://github.com/coolify-terraform/terrafor\n[…]\ncumentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.8 (#571)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-07-18T12:59:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5e27ddfb3b54a184636dd411ae2af50f4c65cf0e",
          "body": "## Summary\n\nCurated GitHub Release body for the upcoming **v0.1.8** release-please\nPR (#571).\n\n## Why a separate PR\n\n`RELEASE_NOTES.md` must land on `main` before the release-please PR is\nmerged.\nThe release workflow picks it up as the GitHub Release description, then\ncleans it up.\n\n## Contents\n\nUse\n[…]\n.5 security bump\n\n## After merge\n\n1. Wait for release-please to refresh #571 if needed\n2. Merge #571 to publish v0.1.8 (only with explicit approval)\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: add release notes for v0.1.8 (#581)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-07-18T12:55:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b20719a653a54e144ad727578cd059ad4cd0446",
          "body": "## Summary\n\nMPI cycle improvement: extend the application compound-import server\nsafety check (#576) to databases and services, plus related docs and\ndiagnostics.\n\n## Changes\n\n- Shared `client.ValidateResourceOnServer` used by applications,\ndatabases, and services on compound import\n- Fail import wh\n[…]\nnt, application, database/*, service, server\n\n## Note\n\nRelease PR #571 (v0.1.8) is open and was **not** merged (needs explicit\napproval).\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: compound import server validation for databases and services (#580)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-07-18T12:24:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d03dc32eddc708b8d0c8677eca71ae884aea3d0",
          "body": "…579)\n\n## Summary\n\nFixes four external-user reports for `coolify_application` and shared\napplication import/flatten paths.\n\n## Changes\n\n### #575 Create with `manual_webhook_secret_*`\n- Include webhook secrets in post-create PATCH (`hasNonDefault` +\n`buildPostCreatePatch`)\n- Preserve planned/state se\n[…]\n/internal/flex/ ./internal/service/application/`\n- `PATH=./bin:$PATH make ci`\n\n## Issues\n\nCloses #575\nCloses #576\nCloses #577\nCloses #578\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: application webhook secrets, import safety, seed fields, docs (#…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-07-18T11:54:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5524768d6f2954fbf5a2aca0bcaf5cf15d2bf63f",
          "body": "## Summary\n\n- PR Title workflow concurrency used `cancel-in-progress: true` per PR\nnumber only\n- Release-please force-pushes (and similar dual events) could cancel the\nConventional Commit check for the current head SHA\n- That left [release PR\n#571](https://github.com/coolify-terraform/terraform-prov\n[…]\nnal Commit job on #571; PR is now\n`CLEAN` / mergeable\n- [ ] Confirm this PR's own Conventional Commit check stays green after\nany synchronize events\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: stop cancel races leaving PR Title checks cancelled (#574)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-07-13T13:46:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e74dd5595c0fd4ab39e459cfca8733604f76daa",
          "body": "Dependabot will resolve any conflicts with this PR as long as you don't\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</sum\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the actions group with 7 updates (#573)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-12T22:18:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d41403420f0f9ba60fb9e58d62188ca4739c9a14",
          "body": "Bumps the go-minor group with 2 updates:\n[github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) and\n[github.com/pb33f/libopenapi-validator](https://github.com/pb33f/libopenapi-validator).\n\nUpdates `github.com/pb33f/libopenapi` from 0.38.5 to 0.38.6\n<details>\n<summary>Release notes</summa\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the go-minor group with 2 updates (#572)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-11T22:13:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3334377f65bf98a43b87f6395441d9b944455ba1",
          "body": "Fixes govulncheck CI failure on main caused by GO-2026-5856 (Encrypted\nClient Hello privacy leak in crypto/tls@go1.26.4, fixed in go1.26.5).\n\n## Changes\n\n- Bump `go` directive in `go.mod` from 1.26.4 to 1.26.5\n\n## Validation\n\n- `go build ./...` passes\n- `govulncheck ./...`: 0 symbol-level vulnerabilities\n- Local govulncheck confirms GO-2026-5856 is resolved\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: bump Go 1.26.4 to 1.26.5 (GO-2026-5856) (#570)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-07-11T10:42:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42668fab35675e2f6f45cdf2f21c3c264ffb6e8c",
          "body": "Bumps the actions group with 8 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1`\n| `4.0.2` |\n|\n[golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action)\n| `9.2.1` | `9.3.0` |\n|\n[goreleaser/goreleaser-\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the actions group with 8 updates (#568)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-11T10:04:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "09362aeb8e539e072cde9850fe74540ac20633f2",
          "body": "Add issue triage infrastructure for this repo.\n\n## Changes\n\n- Create `needs-triage` / `ready` / `needs-info` labels\n- Add `.github/workflows/issue-triage.yml` auto-labeling workflow\n  (OWNER/MEMBER/COLLABORATOR get `ready`; external authors get\n  `needs-triage`)\n- Document triage policy in CONTRIBUT\n[…]\nny project docs\n- Canonical policy source: `github-interaction` SKILL.md sections\n  \"Owned-repo issue triage\" and \"Issue comment scope\"\n\nCloses #565\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: add issue triage labels, workflow, and policy (#569)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-07-11T10:02:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ef94aaafb53d6cfb2ba3a39e3679b308cb3636d7",
          "body": "…n the go-minor group (#567)\n\nBumps the go-minor group with 1 update:\n[github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi).\n\nUpdates `github.com/pb33f/libopenapi` from 0.38.4 to 0.38.5\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/pb33f/libo\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump github.com/pb33f/libopenapi from 0.38.4 to 0.38.5 i…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-04T22:12:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5818f9495507f986097ffa05abe3e4fb015af39e",
          "body": "… group (#566)\n\nBumps the actions group with 1 update:\n[actions/setup-go](https://github.com/actions/setup-go).\n\nUpdates `actions/setup-go` from 6.4.0 to 6.5.0\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/actions/setup-go/releases\">actions/setup-go's\nrel\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 in the actions…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-27T22:13:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "996984ba961f0dadb219975704fe555e0c0ec678",
          "body": "Bumps the go-minor group with 2 updates:\n[github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) and\n[github.com/pb33f/libopenapi-validator](https://github.com/pb33f/libopenapi-validator).\n\nUpdates `github.com/pb33f/libopenapi` from 0.38.1 to 0.38.4\n<details>\n<summary>Release notes</summa\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the go-minor group with 2 updates (#565)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-27T22:12:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a2e173a9cf589a94fb4e75ffd27aa17237c778a",
          "body": "Auto-cleanup of `RELEASE_NOTES.md` after v0.1.7 release.\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: remove release notes override (#563)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-26T16:55:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8376285619a51a9d5db9a30b3653b655209dd00a",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.1.7](https://github.com/coolify-terraform/terraform-provider-coolify/compare/v0.1.6...v0.1.7)\n(2026-06-26)\n\n\n### Bug Fixes\n\n* **github_app:** import by app_id instead of internal id\n([#559](https://github.com/coolify-terraform/terraform-prov\n[…]\ncumentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.7 (#560)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-26T16:41:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a61dfc84f71811194c6b00ece098a69e2a36fc5f",
          "body": "Adds curated release notes for v0.1.7. Merge this before the\nrelease-please PR (#560) so the release workflow picks up the curated\nnotes.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: add release notes for v0.1.7 (#562)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-26T16:34:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e531b1bc6a069911d32bfcd3e1e3dcb96673421",
          "body": "… (#561)\n\n## Changes\n\nThree commits from a multi-perspective improvement rotation:\n\n1. **test: add client tests for GetGitHubAppByAppID** (QA perspective)\n- 4 new unit tests for the `GetGitHubAppByAppID` client method (found,\nnot found, skips built-in record, empty list)\n   - This method had zero te\n[…]\n` added to both docs\n\n## Verification\n\n- `make ci` passes locally (all 13 targets)\n- No grep matches remain for `16 ACME` in the codebase\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: multi-perspective improvement rotation (client tests, doc fixes)…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-26T16:20:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72501832b18ee87f8105108d9bf22702668f705a",
          "body": "## Summary\n\nThe `coolify_github_app` import expected Coolify's internal database\n`id`, which is not exposed anywhere in the Coolify UI. Users only see\nthe GitHub App ID (`app_id`) on the Sources page, causing import to fail\nwith \"Cannot import non-existent remote object\".\n\n## Changes\n\n- **ImportStat\n[…]\n the GitHub App ID shown in Coolify UI (Sources > GitHub App > App Id)\nterraform import coolify_github_app.example 12345\n```\n\nCloses #558\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix(github_app): import by app_id instead of internal id (#559)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-26T15:36:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "51360b5ff2a1e4f0971f6f505017fdacf0a53279",
          "body": "Auto-cleanup of `RELEASE_NOTES.md` after v0.1.6 release.\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: remove release notes override (#557)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-25T00:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "873029c72bb09b8ceff378da3cd5e4a7ed786428",
          "body": "Auto-update stats in the social preview image and repo description.\n\nThe social preview image on GitHub must be re-uploaded manually after\nmerging (Settings > Social preview > Edit > Upload). GitHub has no API\nfor social preview upload.\n\nRef #530\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: update social preview stats (#555)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-25T00:07:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "030b306254f76366d1e5af35ae866ea910e09b1a",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.1.6](https://github.com/coolify-terraform/terraform-provider-coolify/compare/v0.1.5...v0.1.6)\n(2026-06-24)\n\n\n### Features\n\n* auto-update social preview image and repo description with live stats\n([#531](https://github.com/coolify-terraform/t\n[…]\ncumentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.6 (#528)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-25T00:02:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "303585a5873aed36e3b37a791d1fcf7bf48836c2",
          "body": "Curated release notes for v0.1.6. Must be merged to main before the\nrelease-please PR (#528) so the release workflow picks them up.\n\nThe release workflow detects RELEASE_NOTES.md and uses it as the GitHub\nRelease body. A cleanup step deletes the file from main afterward.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: add release notes for v0.1.6 (#554)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-24T23:35:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71cc7a5446accd9e5a59ac083effb3e0d67b55a0",
          "body": "Add health_check update test steps for MongoDB, MariaDB, MySQL, KeyDB,\nand Dragonfly.\n\nPostgreSQL, Redis, and ClickHouse already had this coverage (PR #550, PR\n#552).\nThis completes coverage across all 8 database types, guarding against\nregressions\nof the UseStateForUnknown fix for #549.\n\nFor KeyDB \n[…]\nbined CreateUpdateImport lifecycle test was added following the\npattern\nfrom the other 6 databases.\n\nAll 5 new tests pass with `-race`.\n\nCloses #551\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add health_check update coverage for remaining 5 databases (#553)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-24T23:17:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a64cb6722b5b5f8fd0ed810ac7b5d3ade05580ce",
          "body": "## Changes\n\n- Add v4.1.1 contract for comprehensive compat checks across all\nsupported versions\n- Add health_check update test steps for Redis and ClickHouse (guards\nagainst #549 regressions)\n- Update test count from 950+ to 960+ in AGENTS.md and README.md\n(actual: 968)\n\n## Context\n\nFollow-up from P\n[…]\nctual 968)\n\nFiled #551 for the remaining 5 database types.\n\n## Verification\n\n- `make ci` passes locally\n- All new tests pass with `-race`\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add health_check test coverage and update counts (#552)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-24T22:57:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "01c1e5726dad39fba1b5d7e96628bd5317c24046",
          "body": "…to 4.1.0 (#550)\n\nFixes #549.\n\n## Problem\n\nOn Coolify versions before v4.1.2, the database update endpoint does not\naccept\n`health_check_*` fields in its `$allowedFields` list. The provider used\n`Default` values for these 5 attributes, which created a spurious diff\nafter\nimport (state is null, Defau\n[…]\nen v4.0.0 and v4.1.0)\n- Update all mock version responses in tests\n- Update installation, day-two operations, and scenario testing guides\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: database health_check 422 on Coolify < v4.1.2, bump min version …",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-24T21:43:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b8917ba7145d55905260b4476be25e17816191e",
          "body": "## Summary\n\nCloses remaining items from the multi-perspective audit follow-up:\n\n- **DestroyNoOp tests** for `cloud_token_validate`, `deployment`, and\n`envsbulk` (completing the #544 pattern for all noop-delete resources)\n- **`.DS_Store` in `.gitignore`** to stop macOS metadata showing up as\nuntracke\n[…]\nplate triggers dupl even after #545 helper extraction\n- Release PR #528 — left for separate approval\n\n## Verification\n\n- `make ci` green (968 tests)\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: close audit gaps — destroy no-op coverage and gitignore (#548)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-21T04:21:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "195fb8d831b77252ba4b6c23a1a12dbba47dc175",
          "body": "## Summary\n\nCycle 7 implements #544 and #545 on top of cycle 6 (state-only delete\nerror-path tests).\n\n### Fixes #545 — Hetzner list data source helper\n\n- Add `internal/service/hetzner/data_source_common.go` with shared\n`readFilteredTokenList`, token UUID schema helper, and client configure\nwrapper\n-\n[…]\nop destroy)\n\nCloses #544\nCloses #545\n\n## Test plan\n\n- [x] `make ci` (green locally)\n- [x] Targeted package tests for all changed packages\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: improve cycle 7 — hetzner helper + destroy test coverage (#547)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-21T00:50:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8eb32903de767df1fdc1d14bf53da0f405607f5f",
          "body": "Dependabot PRs open from within the same repo, so they pass the existing\nfork check (`head.repo == repository`). But Dependabot runs cannot\naccess regular repo secrets (only Dependabot secrets), causing FOSSA\nAnalyze to fail with `api-key not supplied`.\n\nThis adds an actor check to skip FOSSA on Dependabot PRs. Push-to-main\nstill runs FOSSA (secrets are always available on push events), so\nlicense scan coverage is not reduced.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: skip FOSSA on Dependabot PRs (#543)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-20T23:43:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f02c3b40479ae1eb5e1acfcbff037d5e49478f6",
          "body": "… group (#542)\n\nBumps the actions group with 1 update:\n[actions/checkout](https://github.com/actions/checkout).\n\nUpdates `actions/checkout` from 6.0.3 to 7.0.0\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/actions/checkout/releases\">actions/checkout's\nrel\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the actions…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-20T23:33:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6c1e729a6704925a68f1e2090a1a563472600658",
          "body": "Bumps the go-minor group with 2 updates:\n[github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) and\n[github.com/pb33f/libopenapi-validator](https://github.com/pb33f/libopenapi-validator).\n\nUpdates `github.com/pb33f/libopenapi` from 0.38.0 to 0.38.1\n<details>\n<summary>Release notes</summa\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the go-minor group with 2 updates (#541)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-20T22:11:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ac2d531658621c3f5237fcfdfd71e0c4cadd0e22",
          "body": "[//]: # (dependabot-start)\n⚠️  **Dependabot is rebasing this PR** ⚠️ \n\nRebasing might not happen immediately, so don't worry if this takes some\ntime.\n\nNote: if you make any changes to this PR yourself, they will take\nprecedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps the actions group\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the actions group with 2 updates (#540)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T22:12:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9daa0acf42a20001db46ad5404de7fec8de0f394",
          "body": "…n the go-minor group (#539)\n\nBumps the go-minor group with 1 update:\n[github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi).\n\nUpdates `github.com/pb33f/libopenapi` from 0.37.3 to 0.38.0\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/pb33f/libo\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump github.com/pb33f/libopenapi from 0.37.3 to 0.38.0 i…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T22:11:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "357e7d678d7ccb35f5f2a9333a3e5d5635e5c83f",
          "body": "The scenarios path filter only matched `examples/scenarios/` and\n`ci.yml`. Changes to provider code under `internal/` did not trigger\nscenario tests, meaning real-API coverage was silently skipped when\nprovider logic changed.\n\nThis adds `internal/**` to the scenarios path filter so scenario tests\nrun whenever provider code changes.\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: trigger scenario tests on internal/ changes (#538)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T22:03:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d8d5c1a83c8466153168e26a36fd98c3a2c9ba5",
          "body": "Fix 3 real findings from GitHub AI code quality scanner:\n\n1. **Unused parameter** (`data_source_logs_test.go:126`): `r\n*http.Request` replaced with `_`\n2. **Race-prone t.Parallel** (`client_spec_test.go:23`): removed parent\n`t.Parallel()` since subtests intentionally skip parallel due to\nlibopenapi-\n[…]\nuaranteed rendered)\n- JS string fragmentation (cosmetic)\n- Template `{ {pr_id} }` spaces (intentional, avoids Go template\ninterpretation)\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: address AI code quality findings (#537)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T21:44:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0f97dc72399feedec5faae724262d04db0167977",
          "body": "Update the reminder issue created by the social preview workflow:\n\n- Use `start-chrome-cdp.sh` instead of raw Chrome launch command\n- Add skill reference to `github-web-admin` for future sessions\n- Remove unnecessary `pip install playwright` (already available)\n\nRef #530\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "chore: improve social preview issue with skill reference (#536)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T21:16:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3da529b7991f35c0ca6ebd66b2a7e41bf0703f0b",
          "body": "Add a step to the social preview workflow that creates a GitHub issue\nwith copy-paste-ready instructions for uploading the social preview\nimage after each release.\n\nOn each release where stats changed:\n1. Closes any previous open reminder issue (labeled `social-preview`)\n2. Creates a new issue with \n[…]\n current stats and verification instructions\n\nThis keeps the upload step visible in your issue list instead of buried\nin a PR description.\n\nRef #530\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "chore: create upload reminder issue on each release (#535)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T21:03:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e4d4a5465ae8c4af7c001abb5e3d0596395cbf19",
          "body": "Redesign the social preview image to better use the 1280x640 canvas:\n\n- Logo scaled up 24% (0.74 to 0.92), vertically centered\n- Title \"for Coolify\" bumped from 82px to 96px\n- Stat badges 19% taller with 24px font (was 20px)\n- Subtle gradient background with faint purple glow behind logo\n- Org name anchoring the bottom\n- All sed patterns for the update-social-preview workflow remain\ncompatible\n\nRef #530\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "chore: redesign social preview to fill canvas (#534)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T20:56:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c2ea2015df35504ebd8d601725041059c104d84",
          "body": "## Changes\n\n1. **Workflow trigger**: Changed from `workflow_run` (every CI pass on\nmain) to `release: published`. Stats only change meaningfully between\nreleases, so running on every push was wasteful.\n\n2. **Upload script**: Added `scripts/upload-social-preview.py` for\nuploading the social preview i\n[…]\nChrome signed in\nto GitHub)\n\n### Manual upload alternative\n\nSettings > Social preview > Edit > Upload > select\n`assets/social-preview.png`\n\nRef #530\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: trigger social preview update on release, add upload script (#533)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T20:48:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "101a870e7668dc7f35aa72bf4ee41b618cb6f3dc",
          "body": "Auto-update stats in the social preview image and repo description.\n\nThe social preview image on GitHub must be re-uploaded manually after\nmerging (Settings > Social preview > Edit > Upload). GitHub has no API\nfor social preview upload.\n\nRef #530\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: update social preview stats (#532)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-13T20:36:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fc0484e1172294ccfb30fb7114d5158f58a893a",
          "body": "… stats (#531)\n\n## Summary\n\nAdd a CI workflow (`update-social-preview.yml`) that automatically keeps\nthe social preview image and repo description in sync with the actual\ncodebase stats.\n\n## Problem\n\nThe social preview image and repo description contained hardcoded stats\n(\"870+ Tests\") that went sta\n[…]\ns.\n\n## Test count rounding\n\nUses floor rounding to the nearest 50 (e.g., 957 -> 950+) to avoid noisy\nPRs on every single test addition.\n\nCloses #530\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "feat: auto-update social preview image and repo description with live…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T20:31:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55b897d97bbb564597065e67efa05334dbc33495",
          "body": "## Summary\n\nThree bugs found while walking through the release workflow end-to-end:\n\n### 1. Cleanup step blocked by branch protection\n\nThe cleanup step tried to delete `RELEASE_NOTES.md` from main via the\nGitHub Contents API. Branch protection (no bypass actors) blocks this.\nFix: create a short-live\n[…]\n, RELEASE_NOTES.md present)**: override applies,\nGoReleaser runs, cleanup creates PR with App token, auto-approve\ntriggers, auto-merge set\n\nRef #526\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: release notes cleanup respects branch protection (#529)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T20:03:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e395131bdacaa650009f0fa356fe524d1dca759",
          "body": "…527)\n\n## Summary\n\nFix the `RELEASE_NOTES.md` override process documented in #524: the file\nmust be committed to main (via a prep PR), not to the release-please\nbranch. Release-please force-pushes its branch on every new main commit,\nwiping any extra files added directly to that branch.\n\nThis is wha\n[…]\ns), the correct\nsequence, and the force-push caveat\n\nNo code logic changes; the override and cleanup steps from #525 are\ncorrect as-is.\n\nCloses #526\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: document RELEASE_NOTES.md must be on main, not release branch (#…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T19:55:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6818db489f9259fcad746e64a11192da7ca11404",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.1.5](https://github.com/coolify-terraform/terraform-provider-coolify/compare/v0.1.4...v0.1.5)\n(2026-06-13)\n\n\n### Features\n\n* support RELEASE_NOTES.md override for curated release descriptions\n([#525](https://github.com/coolify-terraform/terr\n[…]\ncumentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.5 (#516)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-13T19:35:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2597aa8eacaa46896a19b915670702aaf12acb8e",
          "body": "…ons (#525)\n\n## Summary\n\nAdd a `RELEASE_NOTES.md` override mechanism to the release workflow,\nenabling two release modes in a single workflow:\n\n- **Automated (default)**: merge the release-please PR as-is;\nauto-generated notes ship unchanged\n- **AI-assisted**: push a `RELEASE_NOTES.md` to the releas\n[…]\nuration changes.\n\nThe file-based approach is reviewable in the PR diff, versioned on the\ntagged commit, and requires no API gymnastics.\n\nCloses #524\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "feat: support RELEASE_NOTES.md override for curated release descripti…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T19:31:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1703ea24e5432dbed4625a4afb4259ce0a94ee6a",
          "body": "Add guidance for the `PopulateBaseCreateInput` centralized pattern\nalongside the existing server \"distributed Create trap\" warning.\n\nWhen adding shared database fields, all 8 database resources pick up the\nchange automatically via the centralized helper in `database/common.go`.\nNo per-resource Creat\n[…]\nching on the server\nwarning and redundantly adding per-resource field assignments for\ndatabases.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: document centralized database Create pattern in AGENTS.md (#523)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T19:09:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11c0abfa024d88e5fe9418269554bffe9f900017",
          "body": "…late (#522)\n\n## Summary\n\nExtract a `PopulateBaseCreateInput` helper in\n`internal/service/database/common.go` that sets the 9 shared fields on\n`CreateDatabaseBaseInput` from `CommonModel`. This replaces ~60 lines of\nduplicated field-assignment boilerplate across all 8 database resource\nCreate method\n[…]\nract compliance checks pass\n\nBuilds on the `CreateDatabaseBaseInput` struct embedding from #521.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "refactor: extract PopulateBaseCreateInput to eliminate Create boilerp…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T16:39:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0d26d727b7337086cefe982eb209339a1e8c190d",
          "body": "…521)\n\n## Summary\n\nExtract 10 shared fields from 8 duplicate `Create*Input` structs into a\nsingle `CreateDatabaseBaseInput` struct using Go embedding.\n\n## Changes\n\n- Added `CreateDatabaseBaseInput` with shared fields: `server_uuid`,\n`project_uuid`, `environment_name`, `environment_uuid`, `name`,\n`de\n[…]\neateDatabaseBaseInput` instead of 8 times.\n\nJSON wire format is unchanged because Go's `encoding/json` promotes\nembedded struct fields.\n\nCloses #519\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "refactor: extract CreateDatabaseBaseInput to eliminate duplication (#…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T15:48:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4bfec53ad983101e74bf429c65103306bfc4ca22",
          "body": "## Summary\n\nMulti-perspective improvement cycle covering all 14 perspectives plus 5\npost-cycle checks.\n\n## Changes\n\n### QA Engineer (fixes)\n- **PostgreSQL resource test**: Added health check default value\nassertions to the Create step, and a new Update step with non-default\nvalues (`enabled=false`, \n[…]\n57+ tests, 100% contract coverage, and comprehensive CI.\n\n## Verification\n\n`make ci` passes (957 tests, 0 lint issues, all checks green).\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: multi-perspective improvement cycle 2 (#520)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T15:28:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "092ab4e9f5a62d04f3f7d026cb15e694b331c304",
          "body": "## Summary\n\nUpdate the pinned contract from Coolify v4.1.0 to v4.1.2 and implement\nall upstream field changes detected by the weekly contract-freshness CI\njob.\n\n## Changes\n\n### Application\n- **`max_restart_count`** (Computed-only): Maximum container restarts\nbefore Coolify stops the application. Rea\n[…]\nmake ci` passes (957 tests, 0 lint issues, all checks green)\n- All defaults and validation rules match the upstream Coolify source\ncode\n\nCloses #517\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "feat: update contract to Coolify v4.1.2 (#518)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-13T12:43:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3aa42527c95e0b20ead1006eb4645f33dfba8af3",
          "body": "Multi-perspective improvement cycle.\n\nChanges:\n- test: add unit tests for validate.ImportParentChild\n- docs: update test count from 940+ to 950+\n\nSigned-off-by: Sebastien Tardif <seb@tardif.dev>\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: multi-perspective improvement cycle 1 (#515)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-07T04:20:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db1be4d19119e78fa4bbb8057426b3438b1f48a1",
          "body": "Bumps the actions group with 3 updates:\n[actions/github-script](https://github.com/actions/github-script),\n[actions/checkout](https://github.com/actions/checkout) and\n[github/codeql-action](https://github.com/github/codeql-action).\n\nUpdates `actions/github-script` from 7.0.1 to 9.0.0\n<details>\n<summ\n[…]\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Sebastien Tardif <SebTardif@ncf.ca>",
          "is_bot": true,
          "headline": "chore(deps): Bump the actions group with 3 updates (#514)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-07T02:52:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5f6fbebb9543c437d5822bd798a89336761308d3",
          "body": "…n the go-minor group (#513)\n\nBumps the go-minor group with 1 update:\n[github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi).\n\nUpdates `github.com/pb33f/libopenapi` from 0.37.2 to 0.37.3\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/pb33f/libo\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump github.com/pb33f/libopenapi from 0.37.2 to 0.37.3 i…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-06T22:11:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ee8d630825243e0565e283a7486746450ee04be",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.1.4](https://github.com/coolify-terraform/terraform-provider-coolify/compare/v0.1.3...v0.1.4)\n(2026-06-03)\n\n\n### Bug Fixes\n\n* handle PATCH decode error in mock, deduplicate test mux, simplify\nmerge target\n([#508](https://github.com/coolify-t\n[…]\ncumentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.4 (#504)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-03T21:23:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "20c6177af1dd398d7b6659e3bcdd1f0a36ae2099",
          "body": "## Changes\n\n- Add 13 unit tests for `validate.ImportParentChild` covering all 5 code\npaths:\n- Valid import with each of 3 parent types (application, service,\ndatabase)\n  - Wrong format (single value, two parts, four parts, empty)\n  - Invalid parent UUID (path traversal)\n  - Invalid child UUID\n  - In\n[…]\nespite having 5 distinct\nvalidation paths. These tests bring it to 100%.\n\nThe test count in documentation was stale by 17 test functions.\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add ImportParentChild unit tests and update counts (#512)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-03T20:13:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f540d818327f778628dada5f342b81adfc16492f",
          "body": "## Changes\n\nAdd error path tests for 4 API/MCP toggle client methods (EnableAPI,\nDisableAPI, EnableMCP, DisableMCP) that were at 66.7% coverage because\nonly the success path was tested.\n\nEach test verifies the error message wraps the operation context.\n\n## Testing\n\n- All new tests pass locally with `go test -race`\n- `make ci` passes locally (948 tests, no vulnerabilities)\n- `make counts-check` validates counts\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add error path tests for API/MCP toggle client methods (#510)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-03T15:57:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b582a0247ee364010b2b4d279a275d0d3b5195e",
          "body": "## Changes\n\n- Add 3 new test cases for `coolify_application_logs` data source error\nhandling:\n- `TestApplicationLogsDataSource_ContainerNotRunning`: HTTP 400 returns\nempty logs gracefully\n- `TestApplicationLogsDataSource_UnexpectedError`: HTTP 422 surfaces as\ndiagnostic error\n- `TestApplicationLogsD\n[…]\n cover all three\nbranches.\n\n## Verification\n\n- All 947 tests pass locally (`make ci` green)\n- `make counts-check` confirms updated counts\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add error path tests for application logs data source (#509)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-03T15:56:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0abab7aade7f192e3b221d67d5ebfe536eb8609",
          "body": "## Problem\n\nPR #509 (and all future PRs) are stuck with `mergeStateStatus: BLOCKED`\ndespite all checks passing and review approved. Auto-merge never fires.\n\n## Root Cause\n\nThe repository ruleset requires status checks named `CodeQL (go)` and\n`CodeQL (actions)`, but the CodeQL workflow job was named \n[…]\nct\n\nOnce merged, PR #509 (and any other blocked PRs) should unblock and\nauto-merge will proceed.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: rename CodeQL job to match required status check names (#511)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-03T15:46:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93fef84f04397d3bab628e5a72f3eae79a6cdc93",
          "body": "…y merge target (#508)\n\n## Changes\n\n**AI Code Quality findings (2 of 4 were valid):**\n\n- `internal/service/database/dbtest/mock_server.go`: Return 400 on\nmalformed PATCH body instead of silently discarding the decode error.\nPreviously, a malformed request body would result in `applyPatch(nil)`,\nsile\n[…]\nRemoved `--admin` flag and enforce-for-admins toggle from `make merge`\nsince branch protection now uses rulesets with the auto-approve bot\nworkflow.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: handle PATCH decode error in mock, deduplicate test mux, simplif…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-03T05:44:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c7ba2767ed45cb6673b728bfad773dc9e68b19d3",
          "body": "Add CreateAPIError tests to 28 resources, verifying that API error\nresponses during Create surface meaningful diagnostics. Previously\nonly the server resource had this coverage.\n\nAdd body validation (decodeRequestBodyMap) to 39 canned POST handlers\nin the 5 application test files that returned respo\n[…]\nelds (project_uuid, server_uuid)\nare now asserted in every create mock.\n\nUpdate test counts from 910+ to 940+ (944 actual).\n\nCloses #505\nCloses #506\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add CreateAPIError tests and POST body validation",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-03T03:37:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b5c2873470dacdb39737546491e32df03a0b4a0",
          "body": "## Changes\n\n### PATCH body validation in GitRepoExternalChange test\n\nThe `TestApplicationResource_GitRepoExternalChange` PATCH mock handler\naccepted any payload without reading the request body. Added\n`decodeRequestBodyMap` to verify the provider sends `git_repository` in\nthe PATCH body. Previously,\n[…]\nthe project.\n\n### Related issues\n\n- Part of #505 (resource-level Create/Update API error tests)\n- Part of #506 (canned mock handler body validation)\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: improve mock body validation and add Create error test (#507)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-03T02:05:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6223542987da2d73453cfb582a2c45eced18cf91",
          "body": "**Changes:**\n\n1. **Flaky test fix:** The 10ms context timeout in\n`TestDeleteDatabase_AddsWarningWhenPollingTimesOut` was too tight for\nHTTP roundtrips under heavy parallel load with the race detector.\nIncreased to 100ms (still well under the 500ms initial polling delay in\n`PollUntilDeleted`).\n\n2. **\n[…]\n6-5038 (mime)\n   - GO-2026-5039 (net/textproto)\n\nThese were disclosed after the last CI run on main, blocking govulncheck\non all new PRs.\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: increase polling timeout test context + bump Go 1.26.4 (#503)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T23:35:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8fd89457f1f12ca1863e0a78dbc211601ee83b33",
          "body": "## Changes\n\nMulti-perspective improvement cycle 1: QA Engineer and Maintainer\nperspectives.\n\n### Error-path tests for list data sources\n\nAdded `_APIError` test functions to 12 list data sources that were\nmissing error-path coverage. Each test verifies the data source surfaces\na diagnostic error when\n[…]\nother perspectives found actionable issues (12/14 no-op)\n\nCloses: N/A\nRelated: #500, #501 (follow-up issues filed during post-cycle gate)\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add error-path tests and update test counts (#502)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T21:45:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1356db884d9137d6e32610a7a3d8b1c62dc9a6ee",
          "body": "Add error-path tests for three data sources that were missing them:\n- TestDeploymentsDataSource_APIError (deployment list)\n- TestVersionDataSource_ClientError (version single-item)\n- TestHealthDataSource_ClientError (health single-item)\n\nImprove database mock body validation by returning the decoded\n[…]\nscription) affect the\nmock state, so tests catch mismatches between HCL config and what the\nexpand function actually sends.\n\nCloses #500\nCloses #501\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "testing: add error-path tests and improve database mock body validation",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T21:44:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0b83db3abc7c803b4bf6c9aa2926e4ee79961de",
          "body": "## Summary\n\nAdd 14 new unit tests covering Read error paths and client error\nhandling\nacross 7 packages, and document the mock body validation convention.\n\n## Changes\n\n### Read error-path tests (Closes #495)\n\n- **storage**: `TestStorageResource_ReadClientError`,\n`TestStorageResource_ReadNotFound`,\n`\n[…]\n Updated test counts from 880+ to 890+ in AGENTS.md, README.md, and\ntemplates/index.md.tmpl\n\n## Testing\n\n`make ci` passes with 897 tests.\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: improve error-path coverage and Read test gaps (#498)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T17:51:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8538e8102180b9cee778db47b8ca52454cabefab",
          "body": "Remove `test` from the `scenario-tests` job's `needs` list so both jobs\nrun concurrently after the `changes` job. The `ci-pass` gate still\ndepends on both, so any failure in either blocks merge.\n\n**Before:** Changes (4s) -> Test (7min) -> Scenario Tests (6min) =\n~13min\n**After:** Changes (4s) -> max(Test 7min, Scenario Tests 6min) = ~7min\n\nCloses #493\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: parallelize scenario tests with unit tests (#494)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T14:27:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b24e3ddd03a811a5479518a8bc8574247f947a40",
          "body": "Add r.Method == http.MethodGet guard to start/stop endpoint\ncatch-all cases in 8 Disappears test mocks (7 database types +\nservice). These handlers previously accepted any HTTP method,\ninconsistent with the primary mocks and the actual client which\nuses GET for start/stop operations.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: validate HTTP method on start/stop mock handlers",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T13:27:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f859580163937715655611c711327ba9f9f80e64",
          "body": "…es--main\n\nchore(main): release 0.1.3",
          "is_bot": false,
          "headline": "Merge pull request #492 from coolify-terraform/release-please--branch…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T13:16:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "698d616ab3acefbec5a6adaf221c016c05d822e4",
          "body": null,
          "is_bot": true,
          "headline": "chore(main): release 0.1.3",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-02T13:08:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d343600bdd6b370d7cafc5ef563521ddd024acd",
          "body": "Remove the test/lint gate from acceptance-tests so it starts\nimmediately after Detect Changes, in parallel with Test and Lint.\nThe CI gate job still depends on all jobs, so any failure still\nblocks merge.\n\nThis cuts the critical path from ~16min (Changes + Test + AccTests)\nto ~9min (Changes + AccTests) on the common case where all jobs pass.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: run acceptance tests in parallel with unit tests",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T12:54:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f4950b434b74d62fa1bcd9c401e720fa9ae37e3",
          "body": "## Summary\n\nReplace manual `resp.Body.Close()` calls with a single `defer`\nimmediately after `http.Get` in the storage destroy-check helper. This\nensures the body is always closed regardless of which return path is\ntaken.\n\n## Before\n\n```go\nif err := json.NewDecoder(resp.Body).Decode(&result); err !=\n[…]\nt.Errorf(...)\n}\n```\n\n## Testing\n\n- `make test-pkg PKG=./internal/service/storage/` passes (75.5%\ncoverage)\n\nSource: GitHub AI Code Quality findings.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: use defer for resp.Body.Close in storage destroy check (#491)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T03:08:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "efcfde77f7416793e0c563e32a1ff5bade675d23",
          "body": "## Summary\n\nFix 3 silently-ignored errors in test code identified by GitHub AI Code\nQuality findings.\n\n## Changes\n\n### 1. `strconv.ParseInt` error handled\n(`githubapp/resource_test.go:515`)\n\nThe disappears test discarded the parse error with `_`. If the resource\nID were malformed, `store.Delete(0)` \n[…]\nkg PKG=./internal/service/storage/` passes (75.5%\ncoverage)\n- `make ci` passes (883 tests, 0 vulnerabilities)\n\nCloses #487, Closes #488, Closes #489\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: handle ignored errors in githubapp and storage tests (#490)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T01:50:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "09bc849d56c1c573453be4a1f223ae2b39813416",
          "body": "The contract extraction script produces coolify-v4-latest.json when\nrun without a VERSION argument (make contract-extract). This is a\ntransient build artifact that should not be tracked. Versioned\ncontracts (v4.0.0, v4.1.0, v4) remain tracked.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: add coolify-v4-latest.json to .gitignore",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-02T00:30:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab408820e39d6612e7df1073b4b8c51cd1f08745",
          "body": "## Summary\n\nThree targeted improvements found during a multi-perspective codebase\naudit.\n\n### Changes\n\n1. **test(github_app): replace misleading UpgradeState test with proper\nV0->V1 state migration test**\nThe previous `TestGitHubAppResource_UpgradeStateV0` created a new\nresource with the current V1 \n[…]\nll unit tests pass locally (`make test`)\n- CI checks pass (`make ci`)\n- No acceptance test changes needed (test-only and CI-only changes)\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: improve test honesty, CI safety, and error handling (#485)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T22:59:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "06baf044618db889000d1e43f3989fbbf5fbc74f",
          "body": "…ons (#484)\n\n## Changes\n\n- **Release approval gate**: Add `environment: release` to the release\njob in `release.yml`. The `release` GitHub environment is configured\nwith required reviewer (SebTardif), so GoReleaser will not run until\nexplicitly approved. Matches the pattern used in attune-io/attune.\n[…]\n`_ = json.NewDecoder().Decode()`\nerror suppressions in environment variable mock handlers with proper\nerror handling (follow-up to #483).\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: add release approval gate and fix remaining JSON decode suppressi…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T17:53:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56f4bf06737c8c27d5f1250a90b990852b66fcfd",
          "body": "## Changes\n\n- **ci(release):** Switch release workflow from push trigger (which\npolled up to 15 min for CI completion) to `workflow_run` trigger that\nfires only after CI passes on main. Remove redundant smoke test and\ngoreleaser check steps already covered by CI. CI polling retained only\nfor manual \n[…]\nlow change is CI config only; validated by inspection\n- Test change verified with `make test-pkg\nPKG=./internal/service/database/backup/`\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: release workflow_run trigger and test mock error handling (#482)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T16:25:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "79952f9ff93902bd17b7b475dbdfc03f96c98cc7",
          "body": "…erage (#481)\n\nFix two documentation drift issues found during multi-perspective\nimprovement audit:\n\n**README.md**: CI section listed 8 jobs but the actual ci.yml has 9 (DCO\nwas missing from the enumeration).\n\n**TESTING.md**: Acceptance coverage table listed 25 resources but all 33\nprovider resource\n[…]\nerage\nsummary from 25/25 to 33/33.\n\nAlso filed #480 to extend `counts-check` to validate TESTING.md counts\nautomatically so this drift cannot recur.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: fix CI job count in README and update TESTING.md acceptance cov…",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T15:27:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5c2d76212ea817fad024bbfd9a1f84af882b8681",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.1.2](https://github.com/coolify-terraform/terraform-provider-coolify/compare/v0.1.1...v0.1.2)\n(2026-06-01)\n\n\n### Bug Fixes\n\n* **ci:** exclude release-please compare URLs from lychee link check\n([715124c](https://github.com/coolify-terraform/\n[…]\ncumentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: coolify-terraform-auto-approve[bot] <289467684+coolify-terraform-auto-approve[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.2 (#478)",
          "author_name": "coolify-terraform-auto-approve[bot]",
          "author_login": "coolify-terraform-auto-approve[bot]",
          "committed_at": "2026-06-01T15:01:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "715124cdfac4fd1048ef93cd7232906e26449dca",
          "body": "release-please generates CHANGELOG compare URLs (e.g. compare/v0.1.0...v0.1.1)\nthat reference tags not yet created when the link-check workflow runs. The\nrelease job creates the tag after the merge, but link-check triggers on the\nsame push event and races ahead.\n\nAlso add lychee.toml to the workflow path filters so config changes trigger\na verification run.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix(ci): exclude release-please compare URLs from lychee link check",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T14:06:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eefd55caabf7ae6f646028251db41ffabf8f722a",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.1.1](https://github.com/coolify-terraform/terraform-provider-coolify/compare/v0.1.0...v0.1.1)\n(2026-06-01)\n\n\n### Features\n\n* add auto-approve workflow for solo maintainer PRs\n([de9e28f](https://github.com/coolify-terraform/terraform-provider\n[…]\n//github.com/googleapis/release-please#release-please).\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Sebastien Tardif <SebTardif@ncf.ca>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.1 (#455)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-01T13:26:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38cf1397f7937e25d176fe14a3478697a4a693c5",
          "body": "Release-please PRs were authored by `github-actions[bot]` (via\nGITHUB_TOKEN), which caused two problems:\n\n1. GITHUB_TOKEN pushes do not trigger `pull_request` events, so CI and\nauto-approve never ran on release PR updates.\n2. Auto-approve failed with \"Can not approve your own pull request\"\nbecause b\n[…]\ns merges, the next push to main will cause release-please to\nrecreate PR #455 under the App identity, and the full auto-approve + CI\nflow will work.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: use GitHub App token for release-please (#477)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T13:23:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5292e6a87baf7245bb6be627dbe8f70f42a4a8c5",
          "body": "The auto-approve workflow only covered `SebTardif` and\n`dependabot[bot]`. Release-please PRs are authored by\n`github-actions[bot]`, so they never got auto-approved.\n\nCombined with `dismiss_stale_reviews_on_push: true` in the branch\nruleset, this made release PRs (like #455) permanently unmergeable\nw\n[…]\nvery new commit, and\nauto-approve never re-fired because the actor didn't match.\n\n**Fix:** Add `github-actions[bot]` to the auto-approve actor list.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: auto-approve release-please PRs (#476)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T13:16:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c446a7fba19f593fb082b44208ff74e2ce1f4445",
          "body": "Upstream Coolify added a Sentinel agent metrics push endpoint (`POST\n/sentinel/push`). This is an internal server-to-server endpoint used by\nthe Coolify Sentinel agent to push container metrics. Not user-facing,\nno provider resource needed.\n\nCloses #471\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: update contract with new POST /sentinel/push route (#472)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T12:46:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3a700c39e26f90ceb587b09d13fe9dd1e409a7b",
          "body": "Multi-perspective improvement cycle 1 findings:\n\n- Add 12 unit tests for GitHub App decode functions covering envelope\nformat, direct format, invalid JSON, and empty results\n- Add 1 edge case test for ResolveBase64Field with non-UTF8 binary\ncontent\n- Add 1 test for PollUntilDeleted with context canc\n[…]\nlation\n- Update test count from 870+ to 880+ (882 actual, floor-rounded)\n\nAll 14 perspectives reviewed with no other actionable findings.\n\n---------\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add decode function tests and update test counts (#470)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T12:02:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7bb0a0c199051fd807c05382177121f8e161088a",
          "body": "Directly tests the state upgrader function that renames `s3_storage_id`\nto `s3_storage_uuid` during v0->v1 migration. Constructs a v0 prior\nstate with `tftypes`, calls the upgrader, and verifies the renamed field\nand other key fields are preserved in the v1 state.\n\nCloses #468\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "test: add UpgradeState unit test for database_backup v0->v1 (#469)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T06:12:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f93eae2e00a9154b2744605a8d5bff93e42adbf5",
          "body": "All 13 ignore entries targeted `golang.org/x/crypto/ssh` vulnerabilities\n(GO-2026-5005 through GO-2026-5033) that affected v0.51.0. After #466\nupgraded `tools/go.mod` to v0.52.0, both modules are on the fixed\nversion and osv-scanner reports all entries as unused.\n\nRemoving dead config.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "chore: remove unused osv-scanner.toml (#467)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T04:07:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87c90cf8cf413aace9a202484dab4806388430ab",
          "body": "## Summary\n\nUpgrades `golang.org/x/crypto` in the `tools/` module from v0.51.0 to\nv0.52.0, fixing the OpenSSF Scorecard Vulnerabilities check (0/10).\n\n## Root cause\n\nThe main `go.mod` already had the fixed v0.52.0, but the `tools/go.mod`\nwas still on v0.51.0. The Scorecard action scans all `go.mod` \n[…]\n5.0 (transitive)\n\n## Expected impact\n\nScorecard Vulnerabilities check should go from 0/10 to 10/10, raising\nthe overall Scorecard from ~7.5 to ~8.3.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: upgrade golang.org/x/crypto in tools module to v0.52.0 (#466)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T03:39:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "61599377bda6ff37e8502fcd5e29f2be4a19fd6a",
          "body": "Improve OpenSSF Scorecard from 7.1/10 by addressing three checks:\n\n**Vulnerabilities (0/10 to ~10/10)**\n- Add `osv-scanner.toml` suppressing 13 transitive\n`golang.org/x/crypto/ssh` vulns\n- This provider is HTTP-only, never imports SSH packages\n- `govulncheck` confirms no reachable call path\n- Alread\n[…]\nreview` in ruleset\n- Enable `require_last_push_approval` in ruleset\n- Enable `strict_required_status_checks_policy` (up-to-date branches) in\nruleset\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "chore: improve OpenSSF Scorecard checks (#465)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T02:58:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "04a5e814dbc821de82dc259be67587d646920a15",
          "body": "Update AGENTS.md with two changes from a prior session:\n\n- Add FIPS 140-3 note (`GOFIPS140=latest` in `.goreleaser.yml` and\n`release.yml`)\n- CI job count already updated from 8 to 9 (DCO job)\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: update AGENTS.md with FIPS note and CI job count (#464)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T02:42:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74ddce99194a1dc2e9fe15316620915455a4ff04",
          "body": "Adds an OpenTofu Registry badge to the README, linking to\n[search.opentofu.org/provider/coolify-terraform/coolify](https://search.opentofu.org/provider/coolify-terraform/coolify).\n\nThe provider has been registered on the OpenTofu Registry:\n- GPG signing key: opentofu/registry#4363 (PR opentofu/regis\n[…]\nistration: opentofu/registry#4364 (PR\nopentofu/registry#4366)\n\nBoth submissions passed automated validation and are pending auto-merge.\n\nCloses #414\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: add OpenTofu Registry badge to README (#463)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T02:04:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3de226c183aea09e2a13cf7941bb4bda0ef5c86",
          "body": "Add governance model, roadmap, architecture guide, and enhance existing\nCONTRIBUTING.md and SECURITY.md for OpenSSF Best Practices Silver\ncriteria.\n\n**New files:**\n- `GOVERNANCE.md`: solo maintainer model, decision making, access\ncontinuity\n- `ROADMAP.md`: near/medium/long term priorities linked to \n[…]\nndards, test\npolicy\n- `SECURITY.md`: security design principles, assurance case table\n\nAll changes are documentation-only. `make ci` passes locally.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "docs: add Silver badge documentation (#462)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-01T01:52:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ac02a9f087c25ab522954feefb9e6ff4779fb1bd",
          "body": "Adds a workflow that auto-approves PRs from the maintainer (SebTardif)\nand dependabot[bot]. This enables strict branch protection with admin\nenforcement without blocking the solo-maintainer workflow.\n\nRe-approves on synchronize so stale-review dismissal does not block\nupdated PRs.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: add auto-approve workflow for branch protection",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-05-31T23:11:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fe0f6e71a63b8bd70601038f1719cac7d9f26c3",
          "body": "GoReleaser: upload manifest as terraform-provider-coolify_VERSION_manifest.json\ninstead of terraform-registry-manifest.json. The registry parses asset\nfilenames to extract the provider name; the old name triggers 'invalid\nprovider name' warnings. Also include the manifest in checksum.extra_files\nso \n[…]\nl be forced to Node.js 24\nstarting June 16, 2026.\n\nThe v0.1.0 release asset was also renamed manually to clear the\nexisting warning on the registry.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "Fix registry manifest naming and update release-please to v5",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-05-31T22:39:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72fc07d9ab02c64280645f41bb6495f7748ee822",
          "body": "Provider registered at registry.terraform.io/providers/coolify-terraform/coolify.\nGPG key E7C70DC792BCAF7B added to coolify-terraform namespace.\n\nCloses #430\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "Add Terraform Registry badge to README",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-05-31T22:11:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5d78c015e7571d07f65aceaec240c5206bd57b2",
          "body": "- AGENTS.md: 8 -> 9 CI jobs, add DCO (PR only) to job list\n- AGENTS.md: swap stale self-hosted-runner skill ref for\nci-workflow-hygiene\n- GNUmakefile: counts-check now validates CI job count against ci.yml\n\nCloses #460\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: update CI job count to 9, add DCO, validate in counts-check (#461)",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-05-31T21:39:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5e698a36e8f8f16f90234d565ec0f169adc9170",
          "body": "The v0.1.0 release link pointed to the pre-transfer SebTardifLabs org\ninstead of coolify-terraform. While GitHub redirects work, the URL\nshould match the current org for consistency.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: update stale CHANGELOG URL to current org",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-05-31T19:27:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be8428fef84f0c1c9d936b972e2b54fddc1fb0bc",
          "body": "The app-id input is deprecated in v3 and will stop working when GitHub\nenforces Node.js 24. Migrated to client-id (stored as a repo variable\nsince it is not sensitive) and pinned the v3 SHA.\n\nCloses #459\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "ci: migrate auto-approve to create-github-app-token v3 client-id",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-05-31T18:53:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f7599b5949238051ba1979fe4b2fc365166bef0",
          "body": "github.actor changes when a maintainer triggers branch updates (e.g.\ngh pr update-branch). github.event.pull_request.user.login always\nreflects the original PR author regardless of who triggered the event.\n\nSigned-off-by: Sebastien Tardif <sebtardif@ncf.ca>",
          "is_bot": false,
          "headline": "fix: use stable PR author check in auto-approve workflow",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-05-31T18:39:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 9,
      "commits_last_year": 1008,
      "latest_release_at": "2026-07-18T13:02:17Z",
      "latest_release_tag": "v0.1.8",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 11,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/coolify-terraform/terraform-provider-coolify",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/coolify-terraform/terraform-provider-coolify",
          "is_deprecated": false,
          "latest_version": "v0.1.8",
          "repository_url": "https://github.com/coolify-terraform/terraform-provider-coolify",
          "versions_count": 9,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-18T12:59:26Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 9,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-05-31",
            "count": 1
          },
          {
            "date": "2026-06-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": null,
      "open_issues_and_prs": 5
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "GNUmakefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod",
        "tools/go.mod"
      ],
      "largest_source_bytes": 177884,
      "source_files_sampled": 267,
      "oversized_source_files": 3,
      "agent_instruction_files": [
        ".github/copilot-instructions.md",
        "AGENTS.md",
        "CLAUDE.md",
        "GEMINI.md"
      ],
      "agent_instruction_max_bytes": 20205
    },
    "dependencies": {
      "manifests": [
        "go.mod",
        "tools/go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.81.1",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.7.7",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5320"
            ],
            "fixed_version": "1.7.17",
            "advisory_count": 1,
            "oldest_advisory_days": 16
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 16
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 9
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 9
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 9
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 5,
          "critical": 1
        },
        "advisory_count": 6,
        "affected_count": 6,
        "assessed_count": 103,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/hashicorp/go-retryablehttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.8"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-framework",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-framework-timeouts",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-framework-validators",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.19.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.31.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.10.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-testing",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.16.0"
        },
        {
          "name": "github.com/pb33f/libopenapi",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.38.7"
        },
        {
          "name": "github.com/pb33f/libopenapi-validator",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.14.0"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-docs",
          "manifest": "tools/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.25.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/hashicorp/go-retryablehttp",
            "direct": true,
            "version": "v0.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-docs",
            "direct": true,
            "version": "v0.25.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-framework",
            "direct": true,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-framework-timeouts",
            "direct": true,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-framework-validators",
            "direct": true,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-go",
            "direct": true,
            "version": "v0.31.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-log",
            "direct": true,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-testing",
            "direct": true,
            "version": "v1.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pb33f/libopenapi",
            "direct": true,
            "version": "v0.38.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pb33f/libopenapi-validator",
            "direct": true,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/agext/levenshtein",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apparentlymart/go-textseg/v15",
            "direct": false,
            "version": "v15.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/armon/go-radix",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bahlo/generic-list-go",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/basgys/goxml2json",
            "direct": false,
            "version": "v1.1.1-0.20231018121955-e66ee54ceaad",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bgentry/speakeasy",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v4",
            "direct": false,
            "version": "v4.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/buger/jsonparser",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonname",
            "direct": false,
            "version": "v0.26.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/cli",
            "direct": false,
            "version": "v1.1.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-checkpoint",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cty",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-hclog",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-plugin",
            "direct": false,
            "version": "v1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-uuid",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hc-install",
            "direct": false,
            "version": "v0.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hc-install",
            "direct": false,
            "version": "v0.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl/v2",
            "direct": false,
            "version": "v2.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/logutils",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-exec",
            "direct": false,
            "version": "v0.25.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-exec",
            "direct": false,
            "version": "v0.25.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-json",
            "direct": false,
            "version": "v0.27.3-0.20260213134036-298b8f6b673a",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-plugin-sdk/v2",
            "direct": false,
            "version": "v2.40.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-registry-address",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/terraform-svchost",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/yamux",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/imdario/mergo",
            "direct": false,
            "version": "v0.3.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kunde21/markdownfmt/v3",
            "direct": false,
            "version": "v3.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/goutils",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/sprig/v3",
            "direct": false,
            "version": "v3.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-testing-interface",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oklog/run",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pb33f/jsonpath",
            "direct": false,
            "version": "v0.8.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pb33f/ordered-map/v2",
            "direct": false,
            "version": "v2.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/posener/complete",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/protonmail/go-crypto",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vmihailenco/msgpack",
            "direct": false,
            "version": "v4.0.4+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vmihailenco/msgpack/v5",
            "direct": false,
            "version": "v5.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vmihailenco/tagparser/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark-meta",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zclconf/go-cty",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "go.abhg.dev/goldmark/frontmatter",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v4",
            "direct": false,
            "version": "v4.0.0-rc.6",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20230626212559-97b1e661b5df",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/appengine",
            "direct": false,
            "version": "v1.6.8",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.81.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "greenlet",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "playwright",
            "direct": false,
            "version": "1.60.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyee",
            "direct": false,
            "version": "13.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-extensions",
            "direct": false,
            "version": "4.15.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 103,
        "direct_count": 11,
        "indirect_count": 92
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 152,
        "open_issues": 5,
        "closed_ratio": 0.988,
        "closed_issues": 419,
        "closed_unmerged_prs": 9
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "SebTardif",
          "commits": 968,
          "avatar_url": "https://avatars.githubusercontent.com/u/1413412?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "auto-approve.yml",
        "ci.yml",
        "codeql.yml",
        "dependabot-auto-merge.yml",
        "dependency-review.yml",
        "fossa.yml",
        "issue-triage.yml",
        "link-check.yml",
        "pr-title.yml",
        "release.yml",
        "scorecard.yml",
        "stale.yml",
        "test-cloud-bootstrap.yml",
        "update-social-preview.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 7,
            "reason": "badge detected: Silver",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "ac54e9d5fb1d079e8631b242d8973d58a73567d1",
        "ran_at": "2026-07-24T10:22:48Z",
        "aggregate_score": 8.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T05:38:11Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-18T23:12:10Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 393,
          "created_at": "2026-05-24T00:34:42Z",
          "last_comment_at": "2026-05-30T01:36:25Z",
          "last_comment_author": "SebTardif"
        },
        {
          "number": 394,
          "created_at": "2026-05-24T00:34:59Z",
          "last_comment_at": "2026-05-30T01:36:21Z",
          "last_comment_author": "SebTardif"
        },
        {
          "number": 445,
          "created_at": "2026-05-31T14:45:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 475,
          "created_at": "2026-06-01T13:02:43Z",
          "last_comment_at": "2026-06-26T14:21:10Z",
          "last_comment_author": "SebTardif"
        },
        {
          "number": 585,
          "created_at": "2026-07-20T09:23:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/coolify-terraform/terraform-provider-coolify",
    "host": "github.com",
    "name": "terraform-provider-coolify",
    "owner": "coolify-terraform"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 71,
      "inputs": {
        "security": 86,
        "vitality": 76,
        "community": 51,
        "governance": 58,
        "engineering": 86
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 76,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "commits_last_year": 1008,
              "human_commit_share": 0.73,
              "days_since_last_push": 5,
              "active_weeks_last_year": 11
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "11/52 weeks with commits",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "1008 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 1008
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 9,
              "latest_release_tag": "v0.1.8",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "9 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 51,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 15,
            "inputs": {
              "forks": 2,
              "stars": 9,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "9 stars",
                "points": 14.6,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MPL-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MPL-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 58,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "merged_prs": 152,
              "open_issues": 5,
              "closed_issues": 419,
              "issue_closed_ratio": 0.988,
              "closed_unmerged_prs": 9
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "99% of issues closed",
                "points": 46.2,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "152/161 decided PRs merged",
                "points": 36.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 152,
                      "decided": 161
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "coolify-terraform",
              "public_repos": 2,
              "account_age_days": 62
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of coolify-terraform",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "coolify-terraform"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "2 public repos, account ~0 yr old",
                "points": 3.8,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 2
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/coolify-terraform/terraform-provider-coolify"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "9 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 86,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "14 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "coolify",
                "devops",
                "golang",
                "infrastructure-as-code",
                "paas",
                "self-hosted",
                "terraform",
                "terraform-provider"
              ],
              "has_wiki": false,
              "homepage": "https://github.com/coolify-terraform/terraform-provider-coolify",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://github.com/coolify-terraform/terraform-provider-coolify",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "8 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "excellent",
        "name": "Security",
        "value": 86,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 8.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "badge detected: Silver",
                "points": 1.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 103 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 103
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 6,
              "affected_packages": 6,
              "assessed_packages": 103,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, unknown 5",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 103,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 82,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                ".github/copilot-instructions.md",
                "AGENTS.md",
                "CLAUDE.md",
                "GEMINI.md"
              ],
              "agent_instruction_max_bytes": 20205
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".github/copilot-instructions.md, AGENTS.md, CLAUDE.md, GEMINI.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".github/copilot-instructions.md, AGENTS.md, CLAUDE.md, GEMINI.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "73 of 73 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 73,
                      "sampled": 73
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "GNUmakefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod",
                "tools/go.mod"
              ],
              "dependency_bot_commit_share": 0.14
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "GNUmakefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "GNUmakefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "14 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 14,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 177884,
              "source_files_sampled": 267,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/267 source files over 60KB",
                "points": 54.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 267,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T10:23:08.678849Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/coolify-terraform/terraform-provider-coolify.svg",
  "full_name": "coolify-terraform/terraform-provider-coolify",
  "license_state": "standard",
  "license_spdx": "MPL-2.0"
}