原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 86050,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 1995825,
"Go": 854629,
"Shell": 4153,
"Smarty": 4760,
"Makefile": 12250,
"Dockerfile": 5935
},
"pushed_at": "2026-07-23T18:48:38Z",
"created_at": "2022-05-22T16:20:38Z",
"owner_type": "User",
"updated_at": "2022-05-22T15:44:12Z",
"description": "eBPF-based Security Observability and Runtime Enforcement",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "C",
"significant_languages": [
"C",
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "olsajiri",
"company": null,
"location": null,
"followers": 40,
"avatar_url": "https://avatars.githubusercontent.com/u/42811547?v=4",
"created_at": "2018-08-29T15:32:04Z",
"is_verified": null,
"public_repos": 16,
"account_age_days": 2887
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2022-05-13T16:54:09Z"
}
],
"recent_commits": [
{
"oid": "70ced463af7e6608dd0d48a1e563186b1f470f96",
"body": "Currently, the installation instructions for the binary release of the\ntetragon-cli hard-code GOOS=linux and GOARCH=386, but the tool is\nprovided for other platforms. Update the installation instructions\naccordingly and also add commands to check the provided `.sha256sum`\nfile.\n\nSigned-off-by: Tobias Klauser <tobias@cilium.io>",
"is_bot": false,
"headline": "README: fix tetragon-cli installation instructions",
"author_name": "Tobias Klauser",
"author_login": "tklauser",
"committed_at": "2022-05-20T16:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d7ba3cbe78791b916797b25ff626d76877734d1",
"body": "Signed-off-by: Doğukan ÇELİK <dogukan.celik@itu.edu.tr>",
"is_bot": false,
"headline": "Add LICENSE",
"author_name": "Doğukan ÇELİK",
"author_login": "dgkncelik",
"committed_at": "2022-05-20T06:51:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6083f8b1bb63d35355d44d7886a6cd55e31b15fc",
"body": "This patch makes the gRPC address and port configurable in helm and adds a similar option\nto configure the metrics address.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "helm: make gRPC and metrics address/port configurable",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-19T16:44:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9951b47c7d98aa27c7f05c059f3bc182c4bca5c1",
"body": "[commit: 5da009260577a08e33f832b3b2a82413c797c26d]\n\nSigned-off-by: Anastasios Papagiannis <tasos.papagiannnis@gmail.com>\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "Add test for CopyFD",
"author_name": "Anastasios Papagiannis",
"author_login": "tpapagian",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd73ce23136efa1a947685e2645a4a8dad3fff9e",
"body": "Before that we use fd_install to track the correlation of file names\nwith file descriptors. This captures calls of open* syscalls. dup\nsyscall also use the same mechanism.\n\ndup2 and dup3 syscalls use a different way to do that. This commit\nintroduces CopyFD as a complementary action to FollowFD to b\n[…]\n\n argName: 1\n\n[commit: ebe3c49b4884d0037a09c18a74c5390f3885f3c4]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>\nSigned-off-by: Anastasios Papagiannis <tasos.papagiannnis@gmail.com>",
"is_bot": false,
"headline": "Introduce CopyFD to capture file descriptors from dup* syscalls",
"author_name": "Anastasios Papagiannis",
"author_login": "tpapagian",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7e78c909e2d11c832252c5f6e989df2829569f80",
"body": "The \"binary\" field has at max MAXARGLENGTH size. Until now this is\n100. Let's increase that to 256.\n\n[commit: 382eaa827abc39f346106dcfea596c7724e4afbc]\n\nSigned-off-by: Anastasios Papagiannis <tasos.papagiannnis@gmail.com>\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "Increase binary length in process events",
"author_name": "Anastasios Papagiannis",
"author_login": "tpapagian",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f39f4feefdb3ac3fd95b1b86df4112bebcbea763",
"body": "Signed-off-by: Kornilios Kourtis <kornilios@isovalent.com>\n\n[commit: 24f2f2dcaab09c0d23352b8954cc851bb8879c14]",
"is_bot": false,
"headline": "sensors/exec/exec_test: fix default fgsLib",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c2591e060464a89d3faea55d4ed5e97c1837dbb",
"body": "Start the observer so that we actually do the test.\n\nNote: The fork-tester test program issues a connect event. The test, however,\ndoes not use the connect event, and instead uses an exit event and tests\nthat the proper PIDs (as retrieved from fork-tester) match. The reason\nfor not using the connect\n[…]\no verified manually that reverting the \"introduce a clone event\"\npatch, breaks the test.\n\n[commit: 2ed42b90e94cf9cde7cff16e608dd4ebc4a0927e]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "TestFork: actually implement the test",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0cc756c20ef962f1dda742158bca4f650ba9d704",
"body": "Introduce a test that tests that tetragon properly handles events that\ncome from processes that fork() but do not exec().\n\nThis patch just introduces the code that spawns the fork-tester program,\nand parses its output. It does not start the agent to test that events\nare properly created. See subsequent patch for that.\n\n[commit: 072a24de7225fdb80080222e5e5ffb1132d5c457]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "TestFork: initial code for the fork test",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b488053ecc20379c76045cea1faa7f5af37e886d",
"body": "[commit: aec91672d139cb0d3a2a030db76acf8365836ecd]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "eventchecker: add ProcessWithPID helper",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45d87271700f5af0ae2b7058b82bc129428dedfb",
"body": "Add a helper for parsing output of commands, but also logging in using\nt.Log().\n\n[commit: ae8050a6d350fe292eff4594be896f332f3b24f7]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "testutils/cmd: add ParseAndLogCmdOutput helper",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee6bc59e76523a4710e124225545d838272bc7da",
"body": "To be used by later commits.\n\n[commit: 8536cd9e2a78b7df276ced0e7230a7c5a7719ef0]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "testutils: add a ContribPath helper",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "215c949123625a49132fb761a3ec94a2f8887f7c",
"body": "As discussed in a previous commit, processes that do not fork() might end\nup with wrong information.\n\nThis patch introduces a CLONE event. The purpose of this event is to\nallow the agent to have proper process information for new processes\n(i.e., ones created with fork()) that to do not call execve(\n[…]\ndestination_port\": 53,\n \"protocol\": \"TCP\"\n },\n \"time\": \"2022-05-05T10:52:23.798Z\"\n}\n\n[commit: c0417f5b895d66f137de5244fba44e358cc94df2]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "introduce a clone event",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d0cc5f6c6267723eba7bbb514791f3bac7813c2",
"body": "This is in preparation for a subsequent commit that will add another\ntype of event to the cache.\n\n[commit: 7c5872410f94d27e02df048a34137bf5d7e5cf5a]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "grpc/process: rename Add to AddExecEvent",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53fa34688e07c91940fd80601be58ea8e9e98ce8",
"body": "Preparation patch for subsequent changes.\n\n[commit: 3e1419eed29668e2a63d02d816a513c252359586]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "bpf: event_wake_up_new_task: rename value to curr",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d6544cd5d6f6f7eedd801c501a953124464f004",
"body": "factor out __event_find_parent from event_find_parent.\n__event_find_parent is to be used in a subsequent patch.\n\n[commit: d966aaa66d19ac3d436062e901cb945418b56903]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "bpf: create __event_find_parent",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53ad9cef41fb0b52d783625513919416c62d0b1d",
"body": "We load the current pid, only to be overwritten in the loop.\nRemove the unnecessary load.\n\n[commit: 92965888fdf66b9ac39dda3e9355bf73e8989874]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "bpf: remove unused load",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50e4645e5e927e41ce10991e9c99b98e96853d89",
"body": "Add a fork-tester program to illustrate issues for processes that fork()\nbut do not exec().\n\nFor these cases, we do not have process information because this is\ncreated in the exec event.\n\nSo far, we seem to handle these cases by iterating the process tree and\nfinding the parent of the process (see \n[…]\n81Z\"\n}\n\nThis commit just illustrates the issue. Upcoming patches will attempt\nto fix it.\n\n[commit: 879e179b224e15f25ac3b7c692d81d2c2a2dfab1]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "contrib/tester-progs: fork-tester",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0b11cef99009b084364b96d7f81922c3a8bbfab6",
"body": "We have a lot of different C programs under contrib/. Move them all to\na single directory.\n\n[commit: 10b6e9dd1b2f622bbca97edd20e91ac608eb6f9b]\n\nSigned-off-by: Kornilios Kourtis <kornilios@isovalent.com>",
"is_bot": false,
"headline": "contrib: move C test progs in tester-progs",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-19T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61731ca790d982b095dc9eee0574b6d24ca703d6",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "remove -static flag breaking RHEL8 build",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-19T09:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76c33ab589158c050175c5815dfa8f1fd038be95",
"body": "This commit silences \"read error!\" messages when exec id read fails, hides them behind\na debug flag, and adds a metric to count such errors.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "process: silence \"read error\" prints + add metric",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-18T23:31:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19125a816073a43281d3f95c2c98706a26047503",
"body": "The event merge warnings were overly verbose and flooding the logs with useless\ninformation. Silence these warnings by putting them behind a debug flag and add a metric\nto help track such errors. This patch is loosely based on a previous version by Jiri but\nwith some additional information in the me\n[…]\n_merge_errors{curr_fn=\"__x64_sys_read\",curr_type=\"enter\",prev_fn=\"__x64_sys_read\",prev_type=\"enter\"} 6\n\nSigned-off-by: William Findlay <will@isovalent.com>\nCo-authored-by: Jiri Olsa <jolsa@kernel.org>",
"is_bot": false,
"headline": "kprobe: silence event merge warnings + add metric",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-18T23:31:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f08d6bac3df22569b7bb280cbab752405f1a9773",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "fix default DOCKER_DEV_ACCOUNT",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-18T22:56:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52691b1c84dfbb8234274c3dd4893e7be742f3c7",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "use CONTAINER_ENGINE var instead of literal 'docker'",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-18T22:55:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d4e5a8fd38dfd97a673b966f38e097b01ba2d39",
"body": "Signed-off-by: Marwan Nour <38836519+MarwanNour@users.noreply.github.com>",
"is_bot": false,
"headline": "Added note for logging multiple tetragon pods",
"author_name": "Marwan Nour",
"author_login": "MarwanNour",
"committed_at": "2022-05-18T17:17:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94a202a91f430c5c95dc700e307f56a89d646dbe",
"body": "Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "README: Add GKE support",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-17T21:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5606b0a562e88f5c91fac81c119edf537bd90da7",
"body": "This patch adds section describing how to make changes to your\ntetragon repo fork.\n\nSigned-off-by: Djalal Harouni <djalal@cilium.io>",
"is_bot": false,
"headline": "doc: add making changes section to development guide",
"author_name": "Djalal Harouni",
"author_login": "tixxdz",
"committed_at": "2022-05-17T16:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f94b951c2708628adfd082b549999d344632129b",
"body": "… guide\n\nInclude the DEVELOP.md file directly into the Development Guide to make\nit simple for developers.\n\nSigned-off-by: Djalal Harouni <djalal@cilium.io>",
"is_bot": false,
"headline": "doc: include the build and run Tetragon directly into the Development…",
"author_name": "Djalal Harouni",
"author_login": "tixxdz",
"committed_at": "2022-05-17T16:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5c10ffa23c6c9095a9e0a25b472e170da753657",
"body": "Tetragon Open Source project was just released and it does not include\ndefault contributing guidelines.\n\nThis patch fixes this by adding:\n\n1. CONTRIBUTING.md file in the root directory as suggested by github documentation:\nhttps://docs.github.com/en/communities/setting-up-your-project-for-healthy-co\n[…]\nh a section on how to submit pull requests.\n\n3. Moves the DEVELOP.md file from root directory to the `docs/contributing/development/` one.\n\nFixes: #33\n\nSigned-off-by: Djalal Harouni <djalal@cilium.io>",
"is_bot": false,
"headline": "doc: add contribution guideline and how to submit pull requests",
"author_name": "Djalal Harouni",
"author_login": "tixxdz",
"committed_at": "2022-05-17T16:38:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3686d269046b31c060ef7eb8700956d22bbea269",
"body": "Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>",
"is_bot": false,
"headline": "Fixed README command example",
"author_name": "ekoops",
"author_login": "ekoops",
"committed_at": "2022-05-17T15:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "540e2ec3b967d618601b7895a577a011355a475f",
"body": "This is mainly to check commits are signed off, among other things.\n\nSample failure output: https://github.com/cilium/tetragon/runs/6462531785?check_suite_focus=true\n\nSigned-off-by: Michi Mutsuzaki <michi@isovalent.com>\nCo-authored-by: Joe Stringer <joe@cilium.io>",
"is_bot": false,
"headline": "static-check: Run checkpatch.pl",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-17T02:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7efafa3accda668a70efe79633dc359b537f0bd",
"body": "This commit makes a few changes to clean up and streamline code generation, moving main\ncode generation logic into a package and factoring out hard-coded constants in favour of\nvalues we can easily update as needed.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "codegen: clean up codegen package",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-17T01:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73bf2c4c8d5973c1c00cf0d26b39c61b00de30b4",
"body": "Signed-off-by: Kornilios Kourtis <kornilios@gmail.com>",
"is_bot": false,
"headline": "DEVELOP.md: list requirements",
"author_name": "Kornilios Kourtis",
"author_login": "kkourt",
"committed_at": "2022-05-16T18:22:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35e4b8b64ae08c00fd8285df6078fe468b39a627",
"body": "This counter is useful to help debug cases where process exec events are missing a parent.\nUsing the parent exec ID in the metric, we can determine the corresponding pid and cross\ncheck against Tetragon event logs. This can help establish patterns and determine an\nunderlying root cause.\n\nAs a practical example, this counter recently helped me diagnose the underlying cause of\nmissing parents in kind deployments.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "metrics: add a per-exec-id counter for missing parents",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-16T18:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b30403eb117daa3e124d110e9138a58032e18e6",
"body": "Signed-off-by: Dmitry Savintsev <dsavints@gmail.com>",
"is_bot": false,
"headline": "Vagrantfile: install libcap-dev for Makefile",
"author_name": "Dmitry Savintsev",
"author_login": "dmitris",
"committed_at": "2022-05-16T17:04:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c760719a351518ae9e2a9dcc378b871a079b711",
"body": "Rename tcp_connect/tcp_sendmsg/tcp_close to connect/sendmsg/close to\nalign them with other events, and change their emojis to make them look\nslightly more interesting.\n\nSigned-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "encoder: Update TCP event format",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-16T00:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7f1c71aea559c8b22e331aa1ea9bdd078a53dd3",
"body": "We were parsing a 64-bit integer here and converting to a u32 without a bounds check. This\nis obviously wrong, so drop the bit size on the ParseInt call down to 32 and make it\nParseUint. Additionally, split up signed and unsigned cases in parseMatchValues() so that\nwe can properly parse the signed/unsigned integer types.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "selectors: fix missing bounds check on int conversion",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-15T17:40:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "318ff419f65af1bc5767a77f1980ab86b58b3fcf",
"body": "This PR introduces contrib/localdev and adds two helper scripts to make it easy to\nbootstrap a new kind cluster and install the desired version of Tetragon into that\ncluster.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "workflow: add kind scripts to contrib/localdev",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-14T03:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d30be582a54608d7caccde35bdcbe211cbbe137",
"body": "This is needed to make helm work with a local operator image.\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "helm: add imagePullPolicy to operator container",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-14T03:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43d1f5cffccde57c6b846b2e9ebb905416fa9d5b",
"body": "Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "Use quay.io/cilium/hubble-export-stdout",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-13T23:34:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96ebb3a214635dadfe61ff94e80549af6c1515ea",
"body": "Signed-off-by: Joe Stringer <joe@cilium.io>",
"is_bot": false,
"headline": "Add CodeQL analysis",
"author_name": "Joe Stringer",
"author_login": "joestringer",
"committed_at": "2022-05-13T18:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced4528d96efde3b524c1dd47a29278ad9c4b52f",
"body": "Signed-off-by: Joe Stringer <joe@cilium.io>",
"is_bot": false,
"headline": "Create SECURITY.md",
"author_name": "Joe Stringer",
"author_login": "joestringer",
"committed_at": "2022-05-13T18:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a1fadbdd501bb0eec02387f72d5339a5bc93482",
"body": "Issue 1: the xwing pod uses busybox whoami which doesn't support --version, making the\nexit code wrong. To fix this let's just remove the --version argument.\n\nIssue 2: Grammar fix in examples.\n\nIssue 3: \"Incorrectly read, malicious altered\" -> \"Incorrectly read, maliciously altered\"\n\nSigned-off-by: William Findlay <will@isovalent.com>",
"is_bot": false,
"headline": "readme: fix minor issues in quickstart",
"author_name": "William Findlay",
"author_login": "willfindlay",
"committed_at": "2022-05-13T17:53:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75e49ab97e6b44cc5cfe5c522904c629adcfc4bb",
"body": "Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>",
"is_bot": false,
"headline": "Prepare for release v0.8.0",
"author_name": "Michi Mutsuzaki",
"author_login": "michi-covalent",
"committed_at": "2022-05-13T16:54:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "931b70f2c9878ba985ba6b589827bea17da6ec33",
"body": "Cilium developers are happy to contribute Tetragon, Cilium's new component\nenabling powerful, eBPF-based Security Observability and Runtime\nEnforcement.\n\nTetragon detects and is able to respond in real time to security-significant\nevents, such as\n\n* Process execution events\n* Changes to privileges a\n[…]\nhat security event detection can be configured in relation\nto individual workloads.\n\nFor more details and examples please see README.\n\nThanks!\n\nSigned-off-by: John Fastabend <john.fastabend@gmail.com>",
"is_bot": false,
"headline": "Tetragon: Cilium developers happily contribute Tetragon",
"author_name": "John Fastabend",
"author_login": "jrfastab",
"committed_at": "2022-05-13T15:54:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dad6e5d7da494f64abfcf4dc2f38d42de909e82a",
"body": "Initial readme",
"is_bot": false,
"headline": "Merge pull request #2 from cilium/readme",
"author_name": "Liz Rice",
"author_login": "lizrice",
"committed_at": "2022-04-14T16:42:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3618ec95ac660e8fd723f1d47331258bcaf6e39",
"body": null,
"is_bot": false,
"headline": "Initial readme",
"author_name": "Liz Rice",
"author_login": "lizrice",
"committed_at": "2022-04-14T14:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a959ad831f6ab107c249ac88a329248495cb217",
"body": "Security Observability with eBPF initial content",
"is_bot": false,
"headline": "Merge pull request #1 from cilium/initial_content",
"author_name": "Natalia Ivanko",
"author_login": "sharlns",
"committed_at": "2022-03-24T22:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d0fc78cd629e978ad3b82d7f68ddee18f2d2626",
"body": null,
"is_bot": false,
"headline": "Security Observability with eBPF initial content",
"author_name": "Natalia Reka Ivanko",
"author_login": "sharlns",
"committed_at": "2022-03-24T22:52:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec2df9bff86bb61b4d099d60f50634f1ee7f69a5",
"body": null,
"is_bot": false,
"headline": "first commit",
"author_name": "Natalia Reka Ivanko",
"author_login": "sharlns",
"committed_at": "2022-03-24T17:23:16Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 0,
"latest_release_at": "2022-05-13T16:54:09Z",
"latest_release_tag": "v0.8.0",
"releases_from_tags": true,
"days_since_last_push": 2,
"active_weeks_last_year": 0,
"days_since_latest_release": 1534,
"mean_days_between_releases": null
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/cilium/tetragon",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": false,
"registry_url": "https://pkg.go.dev/github.com/cilium/tetragon",
"is_deprecated": false,
"latest_version": "v1.7.0",
"repository_url": "https://github.com/cilium/tetragon",
"versions_count": 45,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-04-29T13:22:56Z",
"latest_version_yanked": null,
"days_since_latest_publish": 87
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"api/Makefile",
"bpf/Makefile",
"contrib/tester-progs/Makefile",
"vendor/github.com/cilium/ebpf/Makefile",
"vendor/github.com/emicklei/go-restful/Makefile",
"vendor/github.com/gobuffalo/flect/Makefile",
"vendor/github.com/gogo/protobuf/proto/Makefile",
"vendor/github.com/hashicorp/hcl/Makefile",
"vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
"vendor/github.com/pelletier/go-toml/Makefile",
"vendor/github.com/pkg/errors/Makefile",
"vendor/github.com/prometheus/procfs/Makefile",
"vendor/github.com/spf13/cast/Makefile",
"vendor/github.com/spf13/cobra/Makefile",
"vendor/github.com/spf13/viper/Makefile",
"vendor/github.com/vishvananda/netlink/Makefile",
"vendor/golang.org/x/net/http2/Makefile",
"vendor/google.golang.org/grpc/Makefile",
"vendor/gopkg.in/ini.v1/Makefile"
],
"api_schema_files": [
"api/v1/tetragon/tetragon.proto",
"vendor/github.com/cilium/hubble/api/v1/flow/flow.proto",
"vendor/github.com/googleapis/gnostic/extensions/extension.proto",
"vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto",
"vendor/google.golang.org/appengine/internal/base/api_base.proto",
"vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
"vendor/google.golang.org/appengine/internal/log/log_service.proto",
"vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
"vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto",
"vendor/k8s.io/api/admissionregistration/v1/generated.proto",
"vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
"vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
"vendor/k8s.io/api/apps/v1/generated.proto",
"vendor/k8s.io/api/apps/v1beta1/generated.proto",
"vendor/k8s.io/api/apps/v1beta2/generated.proto",
"vendor/k8s.io/api/authentication/v1/generated.proto",
"vendor/k8s.io/api/authentication/v1beta1/generated.proto",
"vendor/k8s.io/api/authorization/v1/generated.proto",
"vendor/k8s.io/api/authorization/v1beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta2/generated.proto",
"vendor/k8s.io/api/batch/v1/generated.proto",
"vendor/k8s.io/api/batch/v1beta1/generated.proto",
"vendor/k8s.io/api/certificates/v1/generated.proto",
"vendor/k8s.io/api/certificates/v1beta1/generated.proto",
"vendor/k8s.io/api/coordination/v1/generated.proto",
"vendor/k8s.io/api/coordination/v1beta1/generated.proto",
"vendor/k8s.io/api/core/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1beta1/generated.proto",
"vendor/k8s.io/api/events/v1/generated.proto",
"vendor/k8s.io/api/events/v1beta1/generated.proto",
"vendor/k8s.io/api/extensions/v1beta1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
"vendor/k8s.io/api/networking/v1/generated.proto",
"vendor/k8s.io/api/networking/v1beta1/generated.proto",
"vendor/k8s.io/api/node/v1/generated.proto",
"vendor/k8s.io/api/node/v1alpha1/generated.proto",
"vendor/k8s.io/api/node/v1beta1/generated.proto",
"vendor/k8s.io/api/policy/v1/generated.proto",
"vendor/k8s.io/api/policy/v1beta1/generated.proto",
"vendor/k8s.io/api/rbac/v1/generated.proto",
"vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
"vendor/k8s.io/api/rbac/v1beta1/generated.proto",
"vendor/k8s.io/api/scheduling/v1/generated.proto",
"vendor/k8s.io/api/scheduling/v1alpha1/generated.proto",
"vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
"vendor/k8s.io/api/storage/v1/generated.proto",
"vendor/k8s.io/api/storage/v1alpha1/generated.proto",
"vendor/k8s.io/api/storage/v1beta1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
"vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 1769631,
"source_files_sampled": 263,
"oversized_source_files": 3,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/blang/semver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.5.1+incompatible"
},
{
"name": "github.com/cilium/cilium",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.15"
},
{
"name": "github.com/cilium/ebpf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.1-0.20220125132352-732bf912e846"
},
{
"name": "github.com/cilium/hubble",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.3-0.20220311154618-3e44df066567"
},
{
"name": "github.com/cilium/lumberjack/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.2"
},
{
"name": "github.com/fatih/color",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.6"
},
{
"name": "github.com/google/gops",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.14"
},
{
"name": "github.com/hashicorp/golang-lru",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.4"
},
{
"name": "github.com/iancoleman/strcase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "github.com/kballard/go-shellquote",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20180428030007-95032a82bc51"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.1"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.3"
},
{
"name": "github.com/spf13/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/vishvananda/netlink",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1-0.20210330154013-f5de75959ad5"
},
{
"name": "github.com/yalue/native_endian",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.1"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210220032951-036812b2e83c"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20211216021012-1d35b9e2eb4e"
},
{
"name": "golang.org/x/time",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210723032227-1f47c861a9ac"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.28.0"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/apiextensions-apiserver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "k8s.io/code-generator",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.5"
},
{
"name": "sigs.k8s.io/controller-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.1"
},
{
"name": "sigs.k8s.io/yaml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "kkourt",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/221481?v=4"
},
{
"type": "User",
"login": "willfindlay",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/24983811?v=4"
},
{
"type": "User",
"login": "michi-covalent",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/25494577?v=4"
},
{
"type": "User",
"login": "dmitris",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/31205?v=4"
},
{
"type": "User",
"login": "tpapagian",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/719302?v=4"
},
{
"type": "User",
"login": "tixxdz",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1549291?v=4"
},
{
"type": "User",
"login": "sharlns",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/70883409?v=4"
},
{
"type": "User",
"login": "joestringer",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1243336?v=4"
},
{
"type": "User",
"login": "lizrice",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/458616?v=4"
},
{
"type": "User",
"login": "dgkncelik",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/25586685?v=4"
}
],
"contributors_sampled": 14,
"top_contributor_share": 0.28
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build-images-ci.yml",
"build-images-default-branch.yml",
"build-images-releases.yml",
"build-images-stable-branches.yml",
"generated-files.yaml",
"gotests.yml",
"lint-codeql.yml",
"static-checks.yaml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yaml",
".golangci.yml"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "internal error: Client.Actions.ListWorkflowRunsByFileName: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/olsajiri/tetragon/actions/workflows/build-images-ci.yml/runs?status=success: 404 Not Found []",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 5,
"reason": "dependency not pinned by hash detected -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "77 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "70ced463af7e6608dd0d48a1e563186b1f470f96",
"ran_at": "2026-07-26T06:11:51Z",
"aggregate_score": 3.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/olsajiri/tetragon",
"host": "github.com",
"name": "tetragon",
"owner": "olsajiri"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"security": 37,
"vitality": 34,
"community": 12,
"governance": 43,
"engineering": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 34,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.8.0",
"releases_from_tags": true,
"days_since_latest_release": 1534,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1534 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1534
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [
"no_open_demand"
],
"signals": [
"scorecard_unmaintained"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1527,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 1527 days, with nothing left unanswered; held at dormant by nothing open to answer",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 1527
}
},
{
"code": "abandonment_guarded",
"params": {
"guards": "nothing open to answer"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 43,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 14,
"top_contributor_share": 0.28
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "14 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 14
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 53,
"inputs": {
"followers": 40,
"owner_type": "User",
"is_verified": null,
"owner_login": "olsajiri",
"public_repos": 16,
"account_age_days": 2887
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "40 followers of olsajiri",
"points": 11.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 40,
"login": "olsajiri"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "16 public repos, account ~7 yr old",
"points": 21,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 16
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 63,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml, .golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml, .golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 37,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "internal error: Client.Actions.ListWorkflowRunsByFileName: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/olsajiri/tetragon/actions/workflows/build-images-ci.yml/runs?status=success: 404 Not Found []",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 2.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "77 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 68,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.68,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "34 of 50 human commits state their intent (structured subject or explanatory body)",
"points": 36.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 34,
"sampled": 50
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"api/Makefile",
"bpf/Makefile",
"contrib/tester-progs/Makefile",
"vendor/github.com/cilium/ebpf/Makefile",
"vendor/github.com/emicklei/go-restful/Makefile",
"vendor/github.com/gobuffalo/flect/Makefile",
"vendor/github.com/gogo/protobuf/proto/Makefile",
"vendor/github.com/hashicorp/hcl/Makefile",
"vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
"vendor/github.com/pelletier/go-toml/Makefile",
"vendor/github.com/pkg/errors/Makefile",
"vendor/github.com/prometheus/procfs/Makefile",
"vendor/github.com/spf13/cast/Makefile",
"vendor/github.com/spf13/cobra/Makefile",
"vendor/github.com/spf13/viper/Makefile",
"vendor/github.com/vishvananda/netlink/Makefile",
"vendor/golang.org/x/net/http2/Makefile",
"vendor/google.golang.org/grpc/Makefile",
"vendor/gopkg.in/ini.v1/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, api/Makefile, bpf/Makefile, contrib/tester-progs/Makefile, vendor/github.com/cilium/ebpf/Makefile, vendor/github.com/emicklei/go-restful/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/hashicorp/hcl/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/pelletier/go-toml/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cast/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/spf13/viper/Makefile, vendor/github.com/vishvananda/netlink/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/gopkg.in/ini.v1/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, api/Makefile, bpf/Makefile, contrib/tester-progs/Makefile, vendor/github.com/cilium/ebpf/Makefile, vendor/github.com/emicklei/go-restful/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/hashicorp/hcl/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/pelletier/go-toml/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cast/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/spf13/viper/Makefile, vendor/github.com/vishvananda/netlink/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/gopkg.in/ini.v1/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml, .golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml, .golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 50",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 50
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 1769631,
"source_files_sampled": 263,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/263 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 263,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"api/v1/tetragon/tetragon.proto",
"vendor/github.com/cilium/hubble/api/v1/flow/flow.proto",
"vendor/github.com/googleapis/gnostic/extensions/extension.proto",
"vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto",
"vendor/google.golang.org/appengine/internal/base/api_base.proto",
"vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
"vendor/google.golang.org/appengine/internal/log/log_service.proto",
"vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
"vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto",
"vendor/k8s.io/api/admissionregistration/v1/generated.proto",
"vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
"vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
"vendor/k8s.io/api/apps/v1/generated.proto",
"vendor/k8s.io/api/apps/v1beta1/generated.proto",
"vendor/k8s.io/api/apps/v1beta2/generated.proto",
"vendor/k8s.io/api/authentication/v1/generated.proto",
"vendor/k8s.io/api/authentication/v1beta1/generated.proto",
"vendor/k8s.io/api/authorization/v1/generated.proto",
"vendor/k8s.io/api/authorization/v1beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta1/generated.proto",
"vendor/k8s.io/api/autoscaling/v2beta2/generated.proto",
"vendor/k8s.io/api/batch/v1/generated.proto",
"vendor/k8s.io/api/batch/v1beta1/generated.proto",
"vendor/k8s.io/api/certificates/v1/generated.proto",
"vendor/k8s.io/api/certificates/v1beta1/generated.proto",
"vendor/k8s.io/api/coordination/v1/generated.proto",
"vendor/k8s.io/api/coordination/v1beta1/generated.proto",
"vendor/k8s.io/api/core/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1/generated.proto",
"vendor/k8s.io/api/discovery/v1beta1/generated.proto",
"vendor/k8s.io/api/events/v1/generated.proto",
"vendor/k8s.io/api/events/v1beta1/generated.proto",
"vendor/k8s.io/api/extensions/v1beta1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto",
"vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
"vendor/k8s.io/api/networking/v1/generated.proto",
"vendor/k8s.io/api/networking/v1beta1/generated.proto",
"vendor/k8s.io/api/node/v1/generated.proto",
"vendor/k8s.io/api/node/v1alpha1/generated.proto",
"vendor/k8s.io/api/node/v1beta1/generated.proto",
"vendor/k8s.io/api/policy/v1/generated.proto",
"vendor/k8s.io/api/policy/v1beta1/generated.proto",
"vendor/k8s.io/api/rbac/v1/generated.proto",
"vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
"vendor/k8s.io/api/rbac/v1beta1/generated.proto",
"vendor/k8s.io/api/scheduling/v1/generated.proto",
"vendor/k8s.io/api/scheduling/v1alpha1/generated.proto",
"vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
"vendor/k8s.io/api/storage/v1/generated.proto",
"vendor/k8s.io/api/storage/v1alpha1/generated.proto",
"vendor/k8s.io/api/storage/v1beta1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
"vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
"vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
"vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "api/v1/tetragon/tetragon.proto, vendor/github.com/cilium/hubble/api/v1/flow/flow.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "api/v1/tetragon/tetragon.proto, vendor/github.com/cilium/hubble/api/v1/flow/flow.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"go package 'github.com/cilium/tetragon' points at a different repository (https://github.com/cilium/tetragon); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T06:12:07.056804Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/olsajiri/tetragon.svg",
"full_name": "olsajiri/tetragon",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}