giantswarm / mcp-kubernetes

来自 GitHub 依赖图的完整解析依赖集合：24 个直接依赖与 88 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 112 个包，其中也包含从不交付的开发与测试版本固定：3 个存在已知公告，0 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "kubernetes",
        "mcp-server"
      ],
      "is_fork": false,
      "size_kb": 1884,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 1923558,
        "Shell": 5949,
        "Python": 2361,
        "Makefile": 11374,
        "Dockerfile": 635,
        "Go Template": 1956
      },
      "pushed_at": "2026-07-24T13:48:45Z",
      "created_at": "2025-05-27T13:21:24Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T11:08:35Z",
      "description": "Model Context Protocol (MCP) server for Kubernetes",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://www.giantswarm.io/",
      "name": "Giant Swarm",
      "type": "Organization",
      "login": "giantswarm",
      "company": null,
      "location": "Germany",
      "followers": 143,
      "avatar_url": "https://avatars.githubusercontent.com/u/7556340?v=4",
      "created_at": "2014-05-12T10:05:54Z",
      "is_verified": null,
      "public_repos": 1163,
      "account_age_days": 4457
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.0.20",
          "kind": "patch",
          "published_at": "2026-07-24T11:08:43Z"
        },
        {
          "tag": "v1.0.19",
          "kind": "patch",
          "published_at": "2026-07-24T09:16:02Z"
        },
        {
          "tag": "v1.0.18",
          "kind": "patch",
          "published_at": "2026-07-24T07:40:37Z"
        },
        {
          "tag": "v1.0.17",
          "kind": "patch",
          "published_at": "2026-07-24T06:59:49Z"
        },
        {
          "tag": "v1.0.16",
          "kind": "patch",
          "published_at": "2026-07-22T10:03:50Z"
        },
        {
          "tag": "v1.0.15",
          "kind": "patch",
          "published_at": "2026-07-21T02:58:57Z"
        },
        {
          "tag": "v1.0.14",
          "kind": "patch",
          "published_at": "2026-07-21T02:51:30Z"
        },
        {
          "tag": "v1.0.13",
          "kind": "patch",
          "published_at": "2026-07-18T11:54:18Z"
        },
        {
          "tag": "v1.0.12",
          "kind": "patch",
          "published_at": "2026-07-11T19:51:38Z"
        },
        {
          "tag": "v1.0.11",
          "kind": "patch",
          "published_at": "2026-07-11T07:50:08Z"
        },
        {
          "tag": "v1.0.10",
          "kind": "patch",
          "published_at": "2026-07-09T19:55:16Z"
        },
        {
          "tag": "v1.0.9",
          "kind": "patch",
          "published_at": "2026-07-09T16:39:03Z"
        },
        {
          "tag": "v1.0.8",
          "kind": "patch",
          "published_at": "2026-07-09T16:38:50Z"
        },
        {
          "tag": "v1.0.7",
          "kind": "patch",
          "published_at": "2026-07-09T16:38:37Z"
        },
        {
          "tag": "v1.0.6",
          "kind": "patch",
          "published_at": "2026-07-09T16:02:24Z"
        },
        {
          "tag": "v1.0.5",
          "kind": "patch",
          "published_at": "2026-07-09T16:01:56Z"
        },
        {
          "tag": "v1.0.4",
          "kind": "patch",
          "published_at": "2026-07-09T16:00:58Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2026-07-07T16:21:19Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2026-07-07T09:46:59Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-07-07T09:46:46Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-07-02T16:26:43Z"
        },
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2026-07-02T14:02:38Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2026-07-01T15:38:29Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-07-01T13:30:06Z"
        },
        {
          "tag": "v0.11.13",
          "kind": "patch",
          "published_at": "2026-06-29T07:20:32Z"
        },
        {
          "tag": "v0.11.12",
          "kind": "patch",
          "published_at": "2026-06-28T13:06:44Z"
        },
        {
          "tag": "v0.11.11",
          "kind": "patch",
          "published_at": "2026-06-28T09:20:08Z"
        },
        {
          "tag": "v0.11.10",
          "kind": "patch",
          "published_at": "2026-06-28T09:08:26Z"
        },
        {
          "tag": "v0.11.9",
          "kind": "patch",
          "published_at": "2026-06-26T10:23:00Z"
        },
        {
          "tag": "v0.11.8",
          "kind": "patch",
          "published_at": "2026-06-26T10:22:46Z"
        },
        {
          "tag": "v0.11.7",
          "kind": "patch",
          "published_at": "2026-06-24T23:33:44Z"
        },
        {
          "tag": "v0.11.6",
          "kind": "patch",
          "published_at": "2026-06-24T22:37:14Z"
        },
        {
          "tag": "v0.11.5",
          "kind": "patch",
          "published_at": "2026-06-24T22:27:16Z"
        },
        {
          "tag": "v0.11.4",
          "kind": "patch",
          "published_at": "2026-06-24T16:25:44Z"
        },
        {
          "tag": "v0.11.3",
          "kind": "patch",
          "published_at": "2026-06-24T10:27:34Z"
        },
        {
          "tag": "v0.11.2",
          "kind": "patch",
          "published_at": "2026-06-24T07:28:15Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2026-06-24T07:14:33Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-06-23T14:08:00Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-06-23T13:51:32Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-06-23T10:11:30Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-06-23T08:05:57Z"
        },
        {
          "tag": "v0.8.6",
          "kind": "patch",
          "published_at": "2026-06-23T07:31:27Z"
        },
        {
          "tag": "v0.8.5",
          "kind": "patch",
          "published_at": "2026-06-22T19:30:29Z"
        },
        {
          "tag": "v0.8.4",
          "kind": "patch",
          "published_at": "2026-06-22T17:33:30Z"
        },
        {
          "tag": "v0.8.3",
          "kind": "patch",
          "published_at": "2026-06-22T17:00:40Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2026-06-22T16:44:05Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2026-06-22T15:34:38Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-06-22T15:16:48Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2026-06-22T12:44:32Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2026-06-22T11:30:55Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-06-22T06:33:09Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-06-21T20:06:39Z"
        },
        {
          "tag": "v0.6.7",
          "kind": "patch",
          "published_at": "2026-06-21T15:09:44Z"
        },
        {
          "tag": "v0.6.6",
          "kind": "patch",
          "published_at": "2026-06-20T14:02:40Z"
        },
        {
          "tag": "v0.6.5",
          "kind": "patch",
          "published_at": "2026-06-20T11:57:22Z"
        },
        {
          "tag": "v0.6.4",
          "kind": "patch",
          "published_at": "2026-06-20T10:12:28Z"
        },
        {
          "tag": "v0.6.3",
          "kind": "patch",
          "published_at": "2026-06-18T23:00:06Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-06-18T22:59:29Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-06-18T07:48:07Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-18T06:45:05Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-18T00:23:09Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-06-17T22:07:19Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-06-17T21:13:41Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-17T20:55:09Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-06-17T20:44:35Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-06-17T20:17:41Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-06-17T19:54:40Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-06-17T16:11:34Z"
        },
        {
          "tag": "v0.1.140",
          "kind": "patch",
          "published_at": "2026-06-16T22:50:43Z"
        },
        {
          "tag": "v0.1.139",
          "kind": "patch",
          "published_at": "2026-06-16T20:37:39Z"
        },
        {
          "tag": "v0.1.138",
          "kind": "patch",
          "published_at": "2026-06-16T07:54:44Z"
        },
        {
          "tag": "v0.1.137",
          "kind": "patch",
          "published_at": "2026-06-16T07:53:33Z"
        },
        {
          "tag": "v0.1.136",
          "kind": "patch",
          "published_at": "2026-06-15T15:12:44Z"
        },
        {
          "tag": "v0.1.135",
          "kind": "patch",
          "published_at": "2026-06-11T13:09:49Z"
        },
        {
          "tag": "v0.1.134",
          "kind": "patch",
          "published_at": "2026-06-11T12:42:06Z"
        },
        {
          "tag": "v0.1.133",
          "kind": "patch",
          "published_at": "2026-06-11T05:50:19Z"
        },
        {
          "tag": "v0.1.132",
          "kind": "patch",
          "published_at": "2026-06-10T21:59:47Z"
        },
        {
          "tag": "v0.1.131",
          "kind": "patch",
          "published_at": "2026-06-10T07:48:05Z"
        },
        {
          "tag": "v0.1.130",
          "kind": "patch",
          "published_at": "2026-06-10T07:32:03Z"
        },
        {
          "tag": "v0.1.129",
          "kind": "patch",
          "published_at": "2026-06-09T21:13:28Z"
        },
        {
          "tag": "v0.1.128",
          "kind": "patch",
          "published_at": "2026-06-09T08:04:57Z"
        },
        {
          "tag": "v0.1.127",
          "kind": "patch",
          "published_at": "2026-06-09T06:46:57Z"
        },
        {
          "tag": "v0.1.126",
          "kind": "patch",
          "published_at": "2026-06-09T06:14:27Z"
        },
        {
          "tag": "v0.1.125",
          "kind": "patch",
          "published_at": "2026-06-09T06:14:12Z"
        },
        {
          "tag": "v0.1.124",
          "kind": "patch",
          "published_at": "2026-06-04T19:17:58Z"
        },
        {
          "tag": "v0.1.123",
          "kind": "patch",
          "published_at": "2026-06-04T08:18:46Z"
        },
        {
          "tag": "v0.1.122",
          "kind": "patch",
          "published_at": "2026-06-04T06:45:27Z"
        },
        {
          "tag": "v0.1.121",
          "kind": "patch",
          "published_at": "2026-06-04T06:35:51Z"
        },
        {
          "tag": "v0.1.120",
          "kind": "patch",
          "published_at": "2026-06-03T15:25:54Z"
        },
        {
          "tag": "v0.1.119",
          "kind": "patch",
          "published_at": "2026-06-03T15:20:11Z"
        },
        {
          "tag": "v0.1.118",
          "kind": "patch",
          "published_at": "2026-06-03T15:19:29Z"
        },
        {
          "tag": "v0.1.117",
          "kind": "patch",
          "published_at": "2026-06-03T15:13:25Z"
        },
        {
          "tag": "v0.1.116",
          "kind": "patch",
          "published_at": "2026-06-03T14:37:55Z"
        },
        {
          "tag": "v0.1.115",
          "kind": "patch",
          "published_at": "2026-06-03T11:52:41Z"
        },
        {
          "tag": "v0.1.114",
          "kind": "patch",
          "published_at": "2026-06-03T06:09:52Z"
        },
        {
          "tag": "v0.1.113",
          "kind": "patch",
          "published_at": "2026-06-03T06:02:26Z"
        },
        {
          "tag": "v0.1.112",
          "kind": "patch",
          "published_at": "2026-05-28T16:04:26Z"
        },
        {
          "tag": "v0.1.111",
          "kind": "patch",
          "published_at": "2026-05-28T15:42:39Z"
        },
        {
          "tag": "v0.1.110",
          "kind": "patch",
          "published_at": "2026-05-28T15:37:33Z"
        },
        {
          "tag": "v0.1.109",
          "kind": "patch",
          "published_at": "2026-05-28T06:15:32Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "3c31e89ee64ee12ac0a6234397a6f5050b45bbb4",
          "body": "….1 (#557)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/prometheus/client_golang to v1.24…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-24T11:08:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2c2b4fcfc68b5f72248fb897401a0b33aca6a9a",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#556)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-07-24T09:15:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81abea69c17e1348815e456a09ac92975a7eba11",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update k8s modules to v0.36.3 (#554)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-24T07:40:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47e32112c3567e62b5549c729a8f819f65b5a3c9",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/mark3labs/mcp-go to v0.57.0 (#555)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-24T06:59:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "376e04c01b06ab229c69bbb860818b2ffa6f8203",
          "body": "…552)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.2.0 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T10:03:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "862cddb3a6393c08cae3d9a5d04124eb5f955e57",
          "body": "….0 (#551)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Marian Steinbach <marian@giantswarm.io>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/prometheus/client_golang to v1.24…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-21T02:58:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0fdc20aa2301a2ce7e51381666e56feeb508207",
          "body": "…#550)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.0.13 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-21T02:51:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd4731687969dbc47a7863130be6b7c30f44ad3b",
          "body": "…#549)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.0.12 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-18T11:54:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49cb877005d256b3597597554f8ae0b3d010c6e3",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#547)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-07-11T19:51:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fe6e7fb7fc360b49255bde30b8e984f0aa9a4e7",
          "body": "…#546)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.0.10 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T07:49:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8e5dcc1a420ab9feb17a1f7b5b0bb474a9219e9",
          "body": "…545)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.0.8 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T19:55:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66b53f375c89b820e47f5d1f8298865073c729ec",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/mark3labs/mcp-go to v0.56.0 (#544)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T16:38:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b5ae44cce060b958d273c7b4b9ed32fff1ec922",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module golang.org/x/text to v0.40.0 (#543)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T16:38:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa3e87d82a08332f51aec876e31ea21a986da26a",
          "body": "… v1.6.0 (#542)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/creativeprojects/go-selfupdate to…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T16:38:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fb9bdd12c2c47b72278e9847fa07fd9248bf47c",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module golang.org/x/sync to v0.22.0 (#541)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T16:01:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e3afccd514942c652aec54237a4f9956232ae63",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update go toolchain directive to v1.26.5 (#540)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T16:01:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a36920cbbb3d21d23543007a07a28786b0edeedc",
          "body": "…539)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.0.5 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T16:00:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f9f13693cfff004303952d6c4ef244a3928c4a5",
          "body": "…538)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.0.2 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-07T16:21:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34752394b834ac41f85ab6fb83e1c45655df9aa9",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module golang.org/x/text to v0.39.0 (#537)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-07T09:46:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7672080d15f534bf481617e383c4b8715772dc7a",
          "body": "…536)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v1.0.1 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-07T09:46:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9b5822e1cd657e3ee2350a2c53693176619e7fd",
          "body": "…cp-oauth #498) (#533)\n\n* feat(oauth)!: pass Dex CA to mcp-oauth as explicit config\n\nMigrate off installing the Dex CA on http.DefaultTransport, ahead of\nmcp-oauth #498/#495 which removes the DefaultTransport CA read. Build a\nCA pool from DexCAFile and pass it explicitly as the mcp-oauth server\nJWKS\n[…]\nump mcp-oauth to v1.0.0\n\n* chore: re-trigger CircleCI\n\nCircleCI pipeline was not triggered on the previous push (webhook miss).\n\nClaude-Session: https://claude.ai/code/session_01UBsCu5zwKLQkH3bpauxL3a",
          "is_bot": false,
          "headline": "feat(oauth)!: pass Dex CA to mcp-oauth as explicit config (prep for m…",
          "author_name": "Jose Armesto",
          "author_login": "fiunchinho",
          "committed_at": "2026-07-02T16:26:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dbb366c71e67113aa82cf0f5c91fca6752afc6af",
          "body": "…#529)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.18.9 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-02T14:02:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a2b9219415ea56810f6582129a9a6a022da6aa5",
          "body": "Set io.giantswarm.application.team to the bare bumblebee (was\nteam-bumblebee, which does not match the team=\"bumblebee\" label alerts\nand PagerDuty route on) and default prometheusRules.team to bumblebee\n(was planeteers).",
          "is_bot": false,
          "headline": "Fix team ownership labels (#532)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-07-02T12:59:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94d671afefa13ac31b2d323be621f67f194deec8",
          "body": "…h (#531)\n\n* fix(oauth): trust internal Dex CA on SSO JWKS path via DefaultTransport\n\nDEX_CA_FILE only configured the Dex provider client; the SSO\nforwarded-ID-token JWKS client (mcp-oauth) used the system trust pool,\nso an internal-CA Dex was rejected with \"x509: certificate signed by\nunknown autho\n[…]\nsuer in tests; production\nbranches on ActorSubject, not the source, so behavior is unchanged.\n\nRefs giantswarm/giantswarm#37059\n\nClaude-Session: https://claude.ai/code/session_01UBsCu5zwKLQkH3bpauxL3a",
          "is_bot": false,
          "headline": "fix(oauth): trust internal Dex CA on the SSO forwarded-token JWKS pat…",
          "author_name": "Jose Armesto",
          "author_login": "fiunchinho",
          "committed_at": "2026-07-01T15:38:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb7f0e2b66ed575a6f9e0b957c22070a4be79047",
          "body": "* feat(oauth): remove M2M trusted-issuer support, keep OBO\n\nBump mcp-oauth to v0.18.7 and drop machine-to-machine trusted-issuer\nimpersonation. A trusted-issuer token with no RFC 8693 act claim is now\nrejected; only on-behalf-of (an agent acting for a human) is accepted, and any\nvalidated trusted-is\n[…]\n from the\n*-obo-impersonate ClusterRole. The impersonated human's Kubernetes RBAC\ngoverns access; the userextras were audit-only and required grants the\nplatform impersonation RBAC does not provision.",
          "is_bot": false,
          "headline": "feat(oauth): remove M2M trusted-issuer support, keep OBO (#530)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-07-01T13:29:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21011ec48d127a9eaa212e8423332cea073802ed",
          "body": "…#528)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.18.6 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-29T07:20:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bedb9cf5eee3de0a94461b5f6ba549162ef5662d",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#527)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-28T13:06:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5462033b24da31bf7b383a2c136b3cd122502ef0",
          "body": "…#524)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Timo Derstappen <timo@giantswarm.io>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.18.5 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-28T09:19:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ef09ccb26995bfc6b9587b5fa90197530c74afc",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#526)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-28T09:08:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62dbbf71364c0ccc9da053c0a8e657ab22543c3f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/mark3labs/mcp-go to v0.55.1 (#522)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-26T10:22:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c50e7c41994408a2749df5357aea871d3a4d51bb",
          "body": "…#507)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Timo Derstappen <timo@giantswarm.io>\nCo-authored-by: Quentin Bisson <quentin.bisson@gmail.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.18.2 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-26T10:22:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd0d051a24884f0425dc90f2e42597654e143dca",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#521)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-24T23:33:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d934bfb2706a8b77fdd424148324781bef7f2516",
          "body": "The hand-written ci.yaml duplicates checks already covered by the\ndevctl-generated CircleCI pipeline and centrally-managed workflows:\n\n- make check (lint & test): covered by architect/go-build (test_target:\n  test runs `make test`) plus the pre-commit golangci-lint hook\n- helm-lint: covered by archi\n[…]\nes +\n  go-version pinning to go.mod\n- yamllint: the generated workflows lint their own files\n\nWorkstream 8 of the CI-alignment epic (giantswarm#36729).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: remove hand-written ci.yaml (#518)",
          "author_name": "Timo Derstappen",
          "author_login": "teemow",
          "committed_at": "2026-06-24T22:37:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e3e7d2a3e1cab76af9e8c581049c32b8634075af",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#520)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-24T22:27:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5e1e5b3f9d7ced224c03030a1b4675a45af18da",
          "body": "The hand-written GitHub Actions ci.yaml has drifted from org standards\nand its checks are now covered by the generated CircleCI pipeline and\npre-commit workflow:\n\n- lint & unit test (make check): orb go-test runs `make test`\n  (test_target: test, cgo-adaptive race) plus gofmt/goimports/go-mod-tidy\n \n[…]\nest (make helm-test)\n- govulncheck (relying on nancy + fix_vulnerabilities + go.mod toolchain pin)\n- yamllint (generated workflows lint their own YAML)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "ci: remove hand-written ci.yaml (#519)",
          "author_name": "Timo Derstappen",
          "author_login": "teemow",
          "committed_at": "2026-06-24T16:25:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "21af187f84f2f0e1eb6abac19a64300fc012daf0",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#517)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-24T10:27:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72ce6454ca3e13040d13292d506d503ca95123bd",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update azure/setup-helm action to v5.0.1 (#514)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-24T07:27:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc0d02f69cac379ad6268337566169a2c1b65ecd",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-python action to v6.3.0 (#516)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-24T07:14:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77676098dbab17f9b9f838be5112adec3fe1535e",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go action to v6.5.0 (#515)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-24T07:14:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "978ea00ea1d9c89a22b626d37abf796424b1f240",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update azure/setup-helm digest to 9bc31f4 (#513)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-24T07:13:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a8f61d6aac3cf97fd165bab1cd4076ba395d723",
          "body": "…onal (#512)\n\n* feat(trusted-issuers): make all restriction fields independently optional\n\nEach field on a trustedIssuer entry is now independently enforced when\nset; absent fields impose no restriction for that dimension.\n\n- allowedClaims: optional; entries without an effective subject pattern\n  ac\n[…]\nOBO binary mode distinction and mandatory subject-pattern\nchecks are removed. Values.yaml doc updated to describe per-field\nopt-in model with examples.\n\n* style: gofmt alignment in test constant block",
          "is_bot": false,
          "headline": "feat(trusted-issuers): make all restriction fields independently opti…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-23T14:07:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "877f00eaae60e23af3bae99eb397865059a7ea4b",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>\nCo-authored-by: Marian Steinbach <marian@giantswarm.io>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#509)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-23T13:51:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "154c5001223e71a0c6f0e606b42504ec4d027364",
          "body": "* feat(server): wire AllowPrivateIPJWKSHosts through TrustedIssuerConfig\n\nExpose the mcp-oauth AllowPrivateIPJWKSHosts field in the OAUTH_TRUSTED_ISSUERS\nJSON config so operators can narrow the SSRF escape hatch to a specific in-cluster\nhostname instead of setting the blanket allowPrivateIPJWKS flag.\n\nRequires mcp-oauth with AllowPrivateIPJWKSHosts support (unreleased).\n\n* feat(schema): add allowPrivateIPJWKSHosts to trustedIssuers",
          "is_bot": false,
          "headline": "feat(schema): add allowPrivateIPJWKSHosts to trustedIssuers (#510)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-23T10:11:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "313b704783cff9725ba2fab4334e640c43bfae89",
          "body": "…g (#508)\n\n* feat(server): wire AllowPrivateIPJWKSHosts through TrustedIssuerConfig\n\nExpose the mcp-oauth AllowPrivateIPJWKSHosts field in the OAUTH_TRUSTED_ISSUERS\nJSON config so operators can narrow the SSRF escape hatch to a specific in-cluster\nhostname instead of setting the blanket allowPrivate\n[…]\nsed).\n\n* chore: bump mcp-oauth to v0.15.0; adapt to renamed API\n\nTokenSourceTrustedIssuer split into TokenSourceM2M (no actor) and\nTokenSourceOBO (with ActorSubject). IsDelegated() renamed to IsOBO().",
          "is_bot": false,
          "headline": "feat(server): wire AllowPrivateIPJWKSHosts through TrustedIssuerConfi…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-23T08:05:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fa918df101f26187f965a6274ec596ef4ba3bb24",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency helm to v3.21.2 (#489)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-23T07:31:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4f181efbdcbb88cc5f9a899a95789e2fc7c0aeb",
          "body": "Bumps mcp-oauth to v0.14.1, which replaces TokenSourceTrustedIssuer with\nTokenSourceM2M/TokenSourceOBO and removes IsDelegated().\n\nThe OBO impersonation branch now keys off UserInfo.IsOBO(); the RequireIdentity\nemail-check bypass keys off UserInfo.IsExternalIssuer() instead of comparing\nTokenSource to the removed constant. External-issuer audit events record a\nvalidation_method of m2m or obo.",
          "is_bot": false,
          "headline": "refactor: adopt mcp-oauth m2m/obo token source (#506)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T19:30:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b9b96c2c4b556ef10cc47d4a4e8e93c4d4229ef",
          "body": "…t (#504)\n\nKubernetes impersonation does not inherit the real-auth effective groups,\nincluding system:authenticated. Without it the impersonated identity is\ndenied access to API discovery endpoints (system:discovery ClusterRole is\nbound to system:authenticated), ServerPreferredResources() silently\nr\n[…]\noth paths affected:\n- M2M: appendIfMissing(impersonateGroups, \"system:authenticated\")\n- OBO: Groups: []string{\"system:authenticated\"} (removes wrong comment\n  that claimed kube-apiserver auto-adds it)",
          "is_bot": false,
          "headline": "fix(impersonation): add system:authenticated to impersonated group se…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T17:33:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dca38f3549f6ceb79a3b6d184c607bdad54407a3",
          "body": "…ireIdentity (#503)\n\nRequireIdentity rejects tokens where UserInfo.Email is empty. M2M tokens from\nmuster have sub=SA and no email claim. AccessTokenInjector handles their\nidentity (Impersonate-User via ImpersonateUser config, not email). Skipping\nthe email gate for TokenSourceTrustedIssuer tokens lets M2M reach the injector.",
          "is_bot": false,
          "headline": "fix(middleware): bypass email check for trusted-issuer tokens in Requ…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T17:00:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f674f39806b2416d37eeca055879478e45efacfd",
          "body": "… (#502)\n\nmcp-oauth's OIDCValidator stores issuers in a map[string]TrustedIssuer keyed\nby issuer URL. When two TrustedIssuerConfig entries share an issuer URL (e.g.\nM2M SA sub + OBO email sub for the same muster instance), the second entry\noverwrites the first. The second entry's AllowedClaims then \n[…]\n Propagate AllowPrivateIPJWKS if any entry sets it.\n- Drop AllowedClaims and SubjectClaim for multi-entry issuers; per-entry\n  subject matching runs in AccessTokenInjector after JWT validation passes.",
          "is_bot": false,
          "headline": "fix(server): deduplicate same-issuer TrustedIssuers for OIDCValidator…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T16:43:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1b8d1b5f21f55f346f624e4af7e1a482554c543",
          "body": "…ers schema\n\nThe v0.8.0 values schema was missing these fields, causing Helm upgrade\nfailures on clusters where the giantswarm-configs M2M patch was already\ndeployed (additional property not allowed).",
          "is_bot": false,
          "headline": "fix(schema): add impersonateUser and impersonateGroups to trustedIssu…",
          "author_name": "QuentinBisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T15:34:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb3a3947f3fede8ac3833f594bfc5c62874b5994",
          "body": "…Groups (#501)\n\n* feat(m2m): pure-projector M2M path with impersonateUser + impersonateGroups allow-lists\n\nReplace the alias-namespace construction (Design A) with a pure projection\nmodel (Design B). M2M entries no longer carry an alias; instead:\n\n- ImpersonateUser: exact subject gate (token sub mus\n[…]\ngo mod tidy after mcp-oauth v0.14.0 upgrade\n\n* chore: goimports formatting\n\n* docs: M2M and OBO trusted-issuer identity model\n\n* chore: update CHANGELOG for M2M pure-projector + multi-entry-per-issuer",
          "is_bot": false,
          "headline": "feat(m2m): pure-projector M2M path with impersonateUser + impersonate…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T15:16:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "63deea4000c5a77472bac6059d90e5a674f41355",
          "body": "* fix(helm): dedup per-alias M2M RBAC resources across shared-alias trustedIssuers\n\nMultiple trustedIssuers can legitimately share one alias (e.g. a localMint\nmuster issuer and a fallback OIDC test issuer both scoping to the same\nimpersonation namespace). The previous naive range loop rendered a Nam\n[…]\nre\nnow iterates the candidate slice and selects the entry whose\nallowedClaims pattern matches the token subject, routing M2M and OBO\ntokens from the same STS to their respective impersonation configs.",
          "is_bot": false,
          "headline": "fix: M2M alias dedup + allow same issuer URL for M2M+OBO (#497)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T12:44:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "91c2d3d873c81c86556721de55346c4ad14e651c",
          "body": "…stedIssuers (#496)\n\nMultiple trustedIssuers can legitimately share one alias (e.g. a localMint\nmuster issuer and a fallback OIDC test issuer both scoping to the same\nimpersonation namespace). The previous naive range loop rendered a Namespace,\nRole, RoleBinding, ClusterRole and ClusterRoleBinding p\n[…]\nns in the test suite are unaffected.\n\nDrops the per-ClusterRole m2m-issuer annotation (ambiguous when N issuers share\none alias); keeps it on the Role where it still names the first-occurrence issuer.",
          "is_bot": false,
          "headline": "fix(helm): dedup per-alias M2M RBAC resources across shared-alias tru…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-22T11:30:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fbd93d59c10fba8eaca61cbf9f43dc4e7995feb5",
          "body": "…#495)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.13.2 (…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-22T06:32:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06442e2ce54ced8398661ad565c0f6641d990899",
          "body": "…#494)\n\nAdd trustedIssuers[].subjectClaim so the muster-obo issuer remaps the\nvalidated subject onto the email claim while the opaque sub stays the\nstable id. The in-process subject gate and startup validation now key off\nthe effective subject claim (subjectClaim, or sub by default); mcp-oauth\nevalu\n[…]\ntion chain, not only the leaf, so multi-hop A2A delegation is\nauthorized. The leaf comes from the validated UserInfo; deeper hops are\nread from the authentic token payload.\n\nBump mcp-oauth to v0.10.2.",
          "is_bot": false,
          "headline": "feat(obo): per-issuer subjectClaim remap + act-chain actor matching (…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-21T20:06:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19ca5bc69595ff19893cbc77a248836000f5e3fc",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#493)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-21T15:09:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75347065ed344084326f9e264fa66410287804e1",
          "body": "…491)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.9.3 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-20T14:02:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31e86c62638795f5c184dcb56ceca68eaee3b47b",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#490)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-20T11:57:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8732a018ffc3596dbe388ae94322a7035ff3a157",
          "body": "…488)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.9.1 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-20T10:12:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb93a3aa4c9b256aec52cbe28e04fcc58c11bbea",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout action to v7 (#487)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-18T22:59:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ae6882e3a3885617c00c17225fb7595704fff59",
          "body": "…486)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.9.0 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-18T22:59:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "985ee3aa04bc84ddeb4e12b5c222b5ea52589be6",
          "body": "…484)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.8.0 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-18T07:47:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e733922f13f398d9b06fbc76671ab70e213efee6",
          "body": "…(#485)\n\n* feat(obo): per-actor subject scoping and unrestricted users grant\n\nallowedActors changes from []string to []{sub, allowedSubjects}.\nEach actor entry names an agent SA and optionally restricts the human\nsubjects it may impersonate via glob patterns (*@domain.com or ns:*).\n\nPer-actor subjec\n[…]\n resources behind {{- if .alias }}.\nUpdate the values.yaml comment and add an OBO-only issuer example.\nAdd a helm unit test confirming no Namespace or M2M ClusterRole is\nemitted when alias is omitted.",
          "is_bot": false,
          "headline": "feat(chart): make trustedIssuers alias optional for OBO-only issuers …",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-18T06:44:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f4f1ef06b7273681db83dc9584d06b19d977407c",
          "body": "* feat(obo): per-actor subject scoping and unrestricted users grant\n\nallowedActors changes from []string to []{sub, allowedSubjects}.\nEach actor entry names an agent SA and optionally restricts the human\nsubjects it may impersonate via glob patterns (*@domain.com or ns:*).\n\nPer-actor subject enforce\n[…]\n: existing flat-string allowedActors values must migrate to the\nstruct form.\n\n* chore(rbac): remove explanatory comment from OBO rules block\n\n* chore(rbac): restore OBO comment without phase reference",
          "is_bot": false,
          "headline": "feat(obo): per-actor subject scoping + unrestricted users grant (#483)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-18T00:22:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b478ab54c1bf94157c6f353bdb92630eedde879",
          "body": "* feat(obo): add OBO Phase 2 human-via-agent impersonation\n\nExternal-issuer tokens carrying an RFC 8693 act claim now take an OBO\nbranch in the access-token injector. Impersonate-User is set to the human\nsubject; Impersonate-Extra-actor carries the agent SA sub so the\nkube-apiserver audit log record\n[…]\nto\n[] so no impersonate users grant is emitted unless explicitly populated.\n\nLive e2e is deferred pending muster#851 (OBO token producer).\n\nCloses #477\n\n* fix: gofmt struct field alignment in OBO test",
          "is_bot": false,
          "headline": "feat(obo): OBO Phase 2 — human-via-agent impersonation (#482)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-17T22:07:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "00eef27f351c78059d83bacd20d0e968cadfad9e",
          "body": "…481)\n\n* fix(deps): update module github.com/giantswarm/mcp-oauth to v0.7.1\n\n* go mod tidy\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Quentin Bisson <quentin.bisson@gmail.com>\nCo-authored-by: QuentinBisson <quentin@giantswarm.io>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.7.1 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-17T21:13:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d995d4121b8c65dbe6c0e19e3c72f89c8d176bc",
          "body": "…trict schema) (#403)\n\n* adopt mcp-toolkit partial: responsecap, timeout, logging, serviceName var\n\nWire the toolkit's responsecap (default 128 KiB cap, typed\nresponse_too_large error with IsError=true) and timeout (30s default)\nmiddleware on every tool call. Replace the bare slog.NewTextHandler in\n\n[…]\nts on serviceName var and logging init\n\nCo-authored-by: Quentin Bisson <quentin@giantswarm.io>\n\n* bump mcp-toolkit v0.1.0 → v0.2.9; migrate logging.New → logging.Init; add WithStrictInputSchemaDefault",
          "is_bot": false,
          "headline": "feat: adopt mcp-toolkit v0.2.9 (responsecap, timeout, logging.Init, s…",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-17T20:54:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38d7255f940deffeebb09986705ef33849481d5d",
          "body": "…480)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Quentin Bisson <quentin.bisson@gmail.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.7.0 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-17T20:44:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1a9e7d306f06af7eff4de623a56df519c325c31",
          "body": "- Startup validation now rejects bare '*' as allowedClaims.sub and\n  catches duplicate issuer URLs and aliases before server start.\n- matchesSubGlob: require non-empty prefix before wildcard match so\n  a lone '*' pattern never matches any subject.\n- Valkey encryption log moved to after valkey.New() \n[…]\nache keyed on\n  UserName+Actor to avoid reallocating rest.Config per request;\n  add Actor field to ImpersonationIdentity and inject it into\n  Impersonate-Extra-actor without mutating the caller's map.",
          "is_bot": false,
          "headline": "fix(m2m): close six security issues found in PR review (#479)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-17T20:17:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "00ff316e1644817c92d08624c3a827ed74b707d2",
          "body": "…476)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Quentin Bisson <quentin.bisson@gmail.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.6.0 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-17T19:54:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14f04404ba3c9324e37ba01eb8c6474727e5e9db",
          "body": "When a caller presents a structurally valid JWT (signature OK, audience\nOK, exp OK) but has no email claim, the request was reaching tool\ndispatch and failing with a misleading \"unknown resource type\" error\nfrom the discovery client. The real problem: with no email claim there\nis no Impersonate-User\n[…]\ned by the M2M smoke test on glean (giantswarm/giantswarm#35672)\nwhen a service-account subject was not in muster's\noauth.server.machinePrincipals.\n\nSigned-off-by: QuentinBisson <quentin@giantswarm.io>",
          "is_bot": false,
          "headline": "Fail fast when bearer token has no email claim (#441)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-17T16:11:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "100b315c83a36b9b01a7779098ea696de2bb965a",
          "body": "* Bump mcp-oauth to v0.2.182, add TRUSTED_ISSUERS for M2M JWT acceptance\n\n- Bump github.com/giantswarm/mcp-oauth v0.2.142 -> v0.2.182.\n- Add TRUSTED_ISSUERS env var (JSON array) to configure external JWT\n  issuers trusted at /mcp. Each entry carries issuer, jwksURL,\n  allowedAudiences, and allowPriv\n[…]\ntity.Actor field).\nPhase 1B only handles M2M tokens; this branch's mcp-oauth version has no Act\nfield on UserInfo. Remove the OBO conditional and keep only the M2M path with\nall security fixes intact.",
          "is_bot": false,
          "headline": "feat: M2M trusted-issuer impersonation (Phase 1B) (#439)",
          "author_name": "Quentin Bisson",
          "author_login": "QuentinBisson",
          "committed_at": "2026-06-17T16:11:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e634297d8264fc2a95ddc2cefd617c2a34c5603",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/mark3labs/mcp-go to v0.55.0 (#475)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-16T22:50:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f910e49e092c7f262fd7b9fd718629fb2a300e41",
          "body": "…474)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.4.2 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-16T20:37:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "082031672e0186619457c7d283c035ec97f9ae5d",
          "body": "…472)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.4.0 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-16T07:53:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8952d1cb06bac69f7104186e3c053c7648d11ea7",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency helm to v3.21.1 (#469)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-16T07:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a757e4648aaca340272c42220e5f24508dfebd1",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update k8s modules to v0.36.2 (#473)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-15T15:12:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3bb801713d16ff7f4f2a98e8526f2a8c930443a",
          "body": "…470)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.3.0 (#…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-11T13:09:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ccd5d68b203fb6bd5fa317e8e11414afe42af8b",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#471)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-11T12:41:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "088a1a3b4cd8d05c9075ad5f49f63e44b5ee7ebb",
          "body": "…(#468)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.2.200 …",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-11T05:50:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30feb143cc9af2438264416b4289cc509d92a485",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>\nCo-authored-by: Jose Armesto <github@armesto.net>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#467)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-10T21:59:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd324ed2567ba385d892987e9066b22d82046c07",
          "body": "…(#466)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.2.199 …",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-10T19:18:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "415acce0148a66ccc630d4f36aadf88a308cf62d",
          "body": "…ing (#465)\n\nThe Dockerfile duplicated the go build that architect/go-build already runs\nin CircleCI: every image build recompiled the binary in a golang builder\nstage, and the CI-built binary never shipped. The image now copies the\nmcp-kubernetes-<os>-<arch> binary that go-build attaches to the workspace, same\npattern as muster.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(build): use CI-built binary in container image instead of rebuild…",
          "author_name": "Timo Derstappen",
          "author_login": "teemow",
          "committed_at": "2026-06-10T18:44:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0307288ee13abbeca1a9c1a64c68a98684a5b212",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>\nCo-authored-by: Timo Derstappen <timo@giantswarm.io>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#464)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-10T08:11:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57f5faed6b9e784cd49394b9f0d042fb273e469b",
          "body": "The repo migrated to the devctl-generated zz_generated.auto_release.yaml,\nbut the lint-yaml target still referenced the old auto-release.yaml path,\nfailing 'Lint and Test' on every PR.\n\nCo-authored-by: Quentin Bisson <quentin.bisson@gmail.com>",
          "is_bot": false,
          "headline": "ci: drop removed auto-release.yaml from lint-yaml target (#463)",
          "author_name": "Timo Derstappen",
          "author_login": "teemow",
          "committed_at": "2026-06-10T07:47:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59d15243752a73f0f61ba5db2d051ce878ffd425",
          "body": "…(#449)\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module github.com/giantswarm/mcp-oauth to v0.2.186 …",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-10T07:31:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4541481429a4a72cd60756b67230160b21e0ec0",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency architect to v9.3.0 (#462)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-09T21:13:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e23f24f3fa02831e06dd2382fff7c8826e83f0d4",
          "body": "Co-authored-by: giantswarm-align-files[bot] <288255335+giantswarm-align-files[bot]@users.noreply.github.com>\nCo-authored-by: Jose Armesto <github@armesto.net>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#456)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-09T08:04:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "225d0eeea6cbaa391261972ad69ce3fca0429e3e",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module golang.org/x/text to v0.38.0 (#459)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-09T06:46:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ada3232d0fdd488ae226df54d2cbae551d8aba54",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency architect to v9.2.0 (#460)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-09T06:14:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d90cf7862fd9073e5ae1d0398d6a2019366a66e",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update module golang.org/x/sync to v0.21.0 (#458)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-09T06:13:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2f50354225da0941271620ce076e2f2e58d1868",
          "body": "graphify-out/ holds a regenerable knowledge graph (graph.json, report, html) rebuilt locally by the graphify git hook. It should not be tracked.",
          "is_bot": false,
          "headline": "Add graphify-out/ to .gitignore (#457)",
          "author_name": "Timo Derstappen",
          "author_login": "teemow",
          "committed_at": "2026-06-08T14:08:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f740f7b8adc1948c413468ad5b732dbb27f9439c",
          "body": "…ration (#455)\n\nPR #450 migrated this repo from goreleaser to the push-based auto-release\nflow. The pre-migration `.goreleaser.yaml` produced six binaries every\nrelease tag: linux/amd64, linux/arm64, darwin/amd64, darwin/arm64,\nwindows/amd64, windows/arm64. The replacement `architect/go-build` block\n[…]\ned. Without this\n    second job, go-build builds the binaries for CI but they go\n    nowhere.\n\nMatches the shape muster + mcp-prometheus already use after their own\ngoreleaser -> git-cliff migrations.",
          "is_bot": false,
          "headline": "ci: restore six-binary release matrix dropped by the auto-release mig…",
          "author_name": "Jose Armesto",
          "author_login": "fiunchinho",
          "committed_at": "2026-06-04T19:17:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c9bcbe9d3d7af4e72c5a61dcd3fd16d5afff317",
          "body": "The repo migrated to the push-based auto-release flow (PR #450) but the\nthree release-please artifacts were not deleted in that PR. They have\nbeen dead weight since the auto-release workflow took over tagging and\nGitHub Release publishing:\n\n  - .github/workflows/zz_generated.release-please.yaml -- t\n[…]\nthe\nmanual equivalent for this repo so the dead files do not survive until\nthe next align-files run.\n\nThe auto-release.yaml + cliff.toml combo on main is unchanged and\nremains the active release flow.",
          "is_bot": false,
          "headline": "chore: remove stale release-please files (#454)",
          "author_name": "Jose Armesto",
          "author_login": "fiunchinho",
          "committed_at": "2026-06-04T08:18:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0c5fdcafcab14c829648e31b2d57220c71246b9",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Quentin Bisson <quentin.bisson@gmail.com>",
          "is_bot": true,
          "headline": "chore(deps): update dependency architect to v9.0.2 (#444)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-04T06:45:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47681e7cb92a1fa06ff3e1fca24b61958af0c67f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout action to v6.0.3 (#453)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-04T06:35:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be2b5e7a27f588bcd02d91c434fe81c217241819",
          "body": "Co-authored-by: release-please-workflow[bot] <286719276+release-please-workflow[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.113 (#452)",
          "author_name": "release-please-workflow[bot]",
          "author_login": null,
          "committed_at": "2026-06-03T15:25:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a68f07c390228ae626ee5a4582fdb350a2e8d7c",
          "body": "* chore: align files according to platform standards\n\n* test(ats): pin smoke-test image to a released tag\n\nrun-tests-with-ats deploys the chart and waits for the pod to be ready. The\nchart defaults image.tag to .Chart.AppVersion, which the architect pipeline\nrewrites to a wall-clock dev version comp\n[…]\n-align-files[bot]@users.noreply.github.com>\nCo-authored-by: Timo Derstappen <teemow@gmail.com>\nCo-authored-by: Cursor <cursoragent@cursor.com>\nCo-authored-by: Quentin Bisson <quentin.bisson@gmail.com>",
          "is_bot": true,
          "headline": "chore: align files according to platform standards (#443)",
          "author_name": "giantswarm-align-files[bot]",
          "author_login": "giantswarm-align-files[bot]",
          "committed_at": "2026-06-03T15:19:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b5f22a42a42c31a21403a60ff34cb38167f0833f",
          "body": "* ci: migrate to push-based release flow\n\nReplaces all the existing release-related workflows / configs with the\npush-based auto-release flow validated end-to-end in\ngiantswarm/test-release-please.\n\nRemoved: the legacy create_release_pr.yaml / create_release.yaml / validate_changelog.yaml trio, the \n[…]\na\npre-existing CI bug.\n\nSwitch to `go-version-file: go.mod` so the workflow tracks whatever\ntoolchain go.mod pins. Future toolchain bumps in go.mod automatically\npropagate to CI; no two-place updates.",
          "is_bot": false,
          "headline": "ci: migrate to push-based release flow (#450)",
          "author_name": "Jose Armesto",
          "author_login": "fiunchinho",
          "committed_at": "2026-06-03T15:13:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d04c23862a7a5a4ae2f0347251549f5a52670e62",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update golang docker tag to v1.26.4 (#448)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-03T14:29:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 384,
      "latest_release_at": "2026-07-24T11:08:43Z",
      "latest_release_tag": "v1.0.20",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 38,
      "days_since_latest_release": 1,
      "mean_days_between_releases": 1.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/giantswarm/mcp-kubernetes",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/giantswarm/mcp-kubernetes",
          "is_deprecated": false,
          "latest_version": "v1.0.20",
          "repository_url": "https://github.com/giantswarm/mcp-kubernetes",
          "versions_count": 386,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-24T11:08:30Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 1
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 20
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 61135,
      "source_files_sampled": 184,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        ".cursor/rules/architecture.mdc",
        ".cursor/rules/dev_workflow.mdc",
        ".cursor/rules/mcp-debugging.mdc",
        ".cursor/rules/zz_generated.base-llm-rules.mdc",
        ".cursor/rules/zz_generated.go-llm-rules.mdc"
      ],
      "agent_instruction_max_bytes": 9949
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.81.1",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 3
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "8.4.2",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.8,
            "advisory_ids": [
              "GHSA-6w46-j5rx-g56g",
              "PYSEC-2026-1845"
            ],
            "fixed_version": "9.0.3",
            "advisory_count": 2,
            "oldest_advisory_days": 184
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 17
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1,
          "critical": 1,
          "moderate": 1
        },
        "advisory_count": 4,
        "affected_count": 3,
        "assessed_count": 112,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/creativeprojects/go-selfupdate",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/giantswarm/mcp-oauth",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/giantswarm/mcp-toolkit",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.9"
        },
        {
          "name": "github.com/mark3labs/mcp-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.57.0"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.24.1"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/prometheus",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.66.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/stdout/stdoutmetric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/metric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk/metric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "golang.org/x/oauth2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.0"
        },
        {
          "name": "golang.org/x/text",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.40.0"
        },
        {
          "name": "golang.org/x/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.15.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.3"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/creativeprojects/go-selfupdate",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/giantswarm/mcp-oauth",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/giantswarm/mcp-toolkit",
            "direct": true,
            "version": "v0.2.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mark3labs/mcp-go",
            "direct": true,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/prometheus",
            "direct": true,
            "version": "v0.66.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdoutmetric",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": true,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "code.gitea.io/sdk/gitea",
            "direct": false,
            "version": "v0.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/42wim/httpsig",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davidmz/go-pageant",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-fed/httpsig",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-github/v86",
            "direct": false,
            "version": "v86.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-querystring",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/jsonschema-go",
            "direct": false,
            "version": "v0.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.4-0.20250319132907-e064f32e3674",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-retryablehttp",
            "direct": false,
            "version": "v0.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/spdystream",
            "direct": false,
            "version": "v0.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.70.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/otlptranslator",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ulikunitz/xz",
            "direct": false,
            "version": "v0.5.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valkey-io/valkey-go",
            "direct": false,
            "version": "v1.0.76",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yosida95/uritemplate/v3",
            "direct": false,
            "version": "v3.0.2",
            "ecosystem": "go"
          },
          {
            "name": "gitlab.com/gitlab-org/api/client-go",
            "direct": false,
            "version": "v1.46.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/otelslog",
            "direct": false,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/prometheus",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/exporters/autoexport",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/stdout/stdoutlog",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/log",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/log",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.81.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260317180543-43fb72c5454a",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/streaming",
            "direct": false,
            "version": "v0.36.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20260210185600-b8788abfbbc2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.3",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "pykube-ng",
            "direct": false,
            "version": "23.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-helm-charts",
            "direct": false,
            "version": "1.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-rerunfailures",
            "direct": false,
            "version": "16.3",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": false,
            "version": "2.34.2",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 112,
        "direct_count": 24,
        "indirect_count": 88
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 414,
        "open_issues": 19,
        "closed_ratio": 0.829,
        "closed_issues": 92,
        "closed_unmerged_prs": 31
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "teemow",
          "commits": 134,
          "avatar_url": "https://avatars.githubusercontent.com/u/32488?v=4"
        },
        {
          "type": "User",
          "login": "QuentinBisson",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/2787548?v=4"
        },
        {
          "type": "User",
          "login": "architectbot",
          "commits": 17,
          "avatar_url": "https://avatars.githubusercontent.com/u/61872893?v=4"
        },
        {
          "type": "User",
          "login": "marians",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/273727?v=4"
        },
        {
          "type": "User",
          "login": "ubergesundheit",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/1494211?v=4"
        },
        {
          "type": "User",
          "login": "fiunchinho",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/627038?v=4"
        },
        {
          "type": "User",
          "login": "pipo02mix",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/892157?v=4"
        },
        {
          "type": "User",
          "login": "taylorbot",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/25685558?v=4"
        },
        {
          "type": "User",
          "login": "mcharriere",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/11235884?v=4"
        },
        {
          "type": "User",
          "login": "AndiDog",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1376043?v=4"
        }
      ],
      "contributors_sampled": 12,
      "top_contributor_share": 0.638
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "zz_generated.add-team-labels.yaml",
        "zz_generated.add-to-project-board.yaml",
        "zz_generated.auto_release.yaml",
        "zz_generated.check_values_schema.yaml",
        "zz_generated.fix_vulnerabilities.yaml",
        "zz_generated.gitleaks.yaml",
        "zz_generated.pre-commit.yaml",
        "zz_generated.run_ossf_scorecard.yaml",
        "zz_generated.semantic_pull_request.yaml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/4 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 11 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 6,
            "reason": "dependency not pinned by hash detected -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "3c31e89ee64ee12ac0a6234397a6f5050b45bbb4",
        "ran_at": "2026-07-25T13:14:50Z",
        "aggregate_score": 5.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T11:09:07Z",
      "oldest_open_prs": [
        {
          "number": 553,
          "created_at": "2026-07-22T17:42:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-24T11:08:30Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 5,
          "created_at": "2025-06-13T09:46:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 20,
          "created_at": "2025-06-26T19:31:27Z",
          "last_comment_at": "2026-03-08T23:54:21Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 21,
          "created_at": "2025-06-26T19:31:30Z",
          "last_comment_at": "2026-03-08T23:54:22Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 188,
          "created_at": "2025-12-18T19:45:01Z",
          "last_comment_at": "2026-03-08T23:54:20Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 196,
          "created_at": "2025-12-19T14:22:01Z",
          "last_comment_at": "2026-03-08T23:54:19Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 228,
          "created_at": "2026-01-19T22:45:32Z",
          "last_comment_at": "2026-03-08T23:54:13Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 229,
          "created_at": "2026-01-19T22:45:42Z",
          "last_comment_at": "2026-03-08T23:54:14Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 233,
          "created_at": "2026-01-19T23:26:19Z",
          "last_comment_at": "2026-03-08T23:54:15Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 234,
          "created_at": "2026-01-19T23:26:32Z",
          "last_comment_at": "2026-03-08T23:54:16Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 235,
          "created_at": "2026-01-19T23:26:42Z",
          "last_comment_at": "2026-03-08T23:54:17Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 244,
          "created_at": "2026-01-22T08:44:13Z",
          "last_comment_at": "2026-03-08T23:54:17Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 270,
          "created_at": "2026-02-05T23:26:56Z",
          "last_comment_at": "2026-03-08T23:54:16Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 275,
          "created_at": "2026-02-07T07:16:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 282,
          "created_at": "2026-02-11T11:25:32Z",
          "last_comment_at": "2026-03-08T23:54:15Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 313,
          "created_at": "2026-03-06T10:45:07Z",
          "last_comment_at": "2026-03-08T23:54:18Z",
          "last_comment_author": "teemow"
        },
        {
          "number": 329,
          "created_at": "2026-03-10T15:19:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 500,
          "created_at": "2026-06-22T13:59:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 523,
          "created_at": "2026-06-25T23:30:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 548,
          "created_at": "2026-07-15T09:31:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/giantswarm/mcp-kubernetes",
    "host": "github.com",
    "name": "mcp-kubernetes",
    "owner": "giantswarm"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 68,
      "inputs": {
        "security": 66,
        "vitality": 90,
        "community": 24,
        "governance": 68,
        "engineering": 86
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 90,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "commits_last_year": 384,
              "human_commit_share": 0.31,
              "days_since_last_push": 0,
              "active_weeks_last_year": 38
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "38/52 weeks with commits",
                "points": 26.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 38
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "384 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 384
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v1.0.20",
              "releases_from_tags": false,
              "days_since_latest_release": 1,
              "mean_days_between_releases": 1.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 22,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 22 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 68,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 12,
              "top_contributor_share": 0.638
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 64% of commits",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 64
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "12 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 11 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "merged_prs": 414,
              "open_issues": 19,
              "closed_issues": 92,
              "issue_closed_ratio": 0.829,
              "closed_unmerged_prs": 31
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "83% of issues closed",
                "points": 38.8,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 83
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "414/445 decided PRs merged",
                "points": 35.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 414,
                      "decided": 445
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/4 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "followers": 143,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "giantswarm",
              "public_repos": 1163,
              "account_age_days": 4457
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "143 followers of giantswarm",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 143,
                      "login": "giantswarm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "1163 public repos, account ~12 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 1163
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/giantswarm/mcp-kubernetes"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 1
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 1 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "386 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 386
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 86,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "9 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "kubernetes",
                "mcp-server"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "2 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/4 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 11 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 6",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 112 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 112
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 4,
              "affected_packages": 3,
              "assessed_packages": 112,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, moderate 1, unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 112,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 21
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 92,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                ".cursor/rules/architecture.mdc",
                ".cursor/rules/dev_workflow.mdc",
                ".cursor/rules/mcp-debugging.mdc",
                ".cursor/rules/zz_generated.base-llm-rules.mdc",
                ".cursor/rules/zz_generated.go-llm-rules.mdc"
              ],
              "agent_instruction_max_bytes": 9949
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursor/rules/architecture.mdc, .cursor/rules/dev_workflow.mdc, .cursor/rules/mcp-debugging.mdc, .cursor/rules/zz_generated.base-llm-rules.mdc, .cursor/rules/zz_generated.go-llm-rules.mdc",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursor/rules/architecture.mdc, .cursor/rules/dev_workflow.mdc, .cursor/rules/mcp-debugging.mdc, .cursor/rules/zz_generated.base-llm-rules.mdc, .cursor/rules/zz_generated.go-llm-rules.mdc"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "31 of 31 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 31,
                      "sampled": 31
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.04,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.53
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "4 of the last 100 commits agent-authored or agent-credited",
                "points": 8,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 4,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "53 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 53,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 61135,
              "source_files_sampled": 184,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/184 source files over 60KB",
                "points": 54.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 184,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T13:15:11.747727Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/giantswarm/mcp-kubernetes.svg",
  "full_name": "giantswarm/mcp-kubernetes",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}