runs/scorecard-holger/20261030T1312Z-8b0cb2b3/run.json
{
"pipeline": "scorecard-holger",
"repo": "holger",
"branch": "main",
"sha": "8b0cb2b31bf441da0572ba61d0a336a2f6f2aa95",
"trigger": "manual",
"status": "green",
"run_id": "explorer-run_pipeline-1793365929016",
"queued": "",
"started": "2026-10-30T13:12:09.017381445+00:00",
"ended": "2026-10-30T13:13:49.769594985+00:00",
"duration_s": 100,
"reason": "",
"dir": "runs/scorecard-holger/20261030T1312Z-8b0cb2b3",
"summary": "OpenSSF Scorecard v5.6.0, local mode, on `holger` at `8b0cb2b3`: **2.9 / 10** (the aggregate of the checks local mode runs).\n\n| check | score | reason |\n|---|---|---|\n| Binary-Artifacts | 6 / 10 | binaries present in source code |\n| Dangerous-Workflow | inconclusive | no workflows found |\n| Dependency-Update-Tool | 0 / 10 | no update tool detected |\n| Fuzzing | 0 / 10 | project is not fuzzed |\n| License | 9 / 10 | license file detected |\n| Packaging | inconclusive | packaging workflow not detected |\n| Pinned-Dependencies | inconclusive | no dependencies found |\n| SAST | 0 / 10 | no SAST tool detected |\n| Security-Policy | 10 / 10 | security policy file detected |\n| Token-Permissions | inconclusive | No tokens found |\n| Vulnerabilities | 0 / 10 | 13 existing vulnerabilities detected |\n\nNot run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.\n"
}