{"id":369277,"url":"https://github.com/aws/aws-encryption-sdk-python","last_synced_at":"2026-08-24T12:32:32.891Z","repository":{"id":37271527,"uuid":"79851305","full_name":"aws/aws-encryption-sdk-python","owner":"aws","description":"AWS Encryption SDK","archived":false,"fork":false,"pushed_at":"2026-08-10T21:15:36.000Z","size":2496,"stargazers_count":253,"open_issues_count":53,"forks_count":89,"subscribers_count":22,"default_branch":"master","last_synced_at":"2026-08-15T10:08:48.871Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/introduction.html","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":"SUPPORT_POLICY.rst","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-01-23T21:43:26.000Z","updated_at":"2026-08-13T12:56:00.000Z","dependencies_parsed_at":"2023-10-03T08:56:37.907Z","dependency_job_id":"c56929b1-117c-4065-9762-4bdb54f40576","html_url":"https://github.com/aws/aws-encryption-sdk-python","commit_stats":{"total_commits":497,"total_committers":39,"mean_commits":"12.743589743589743","dds":0.3843058350100603,"last_synced_commit":"899af22c25fdd5d896817e40514b5ea0e1537e90"},"previous_names":[],"tags_count":30,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-encryption-sdk-python","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/sbom","scorecard":{"id":219396,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-encryption-sdk-python","commit":"cbfab663e94c4ed1db5211886770e1aa403a7c67"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":4,"reason":"5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci_codebuild-tests.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci_codebuild_batch.yml:12","Warn: no topLevel permission defined: .github/workflows/ci_decrypt-oracle.yaml:1","Warn: no topLevel permission defined: .github/workflows/ci_static-analysis.yaml:1","Warn: no topLevel permission defined: .github/workflows/ci_test-vector-handler.yaml:1","Warn: no topLevel permission defined: .github/workflows/ci_tests.yaml:1","Warn: no topLevel permission defined: .github/workflows/daily_ci.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/dependabot-auto-merge.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/push.yml:9","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild-tests.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:369: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:486: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:735: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:741: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:754: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:760: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1139: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1145: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:498: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:504: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:624: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:630: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:717: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:723: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1009: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1015: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1027: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1033: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1214: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1220: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:333: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:588: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:955: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:961: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:642: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:648: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:773: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:779: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1158: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1164: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1195: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1201: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:449: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:991: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:997: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1045: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1051: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:883: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:889: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:901: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:907: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1083: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1089: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1233: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1239: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1252: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1258: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1307: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1313: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:660: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:666: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:679: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:685: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:387: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:810: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:816: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1270: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1276: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1342: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1348: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:937: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:943: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:424: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:430: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:865: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:871: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:570: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:576: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:606: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:612: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:698: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:704: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:847: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:853: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1120: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1126: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:534: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:540: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:552: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:973: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:979: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1324: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1330: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:828: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:834: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:405: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:411: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:792: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:798: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:919: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:925: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1102: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1108: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1288: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1294: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:462: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:468: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:516: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:522: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1177: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1183: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1064: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1070: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_static-analysis.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_static-analysis.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_static-analysis.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_static-analysis.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-auto-merge.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/dependabot-auto-merge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/pull.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/repo-sync.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/repo-sync.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/repo-sync.yml/master?enable=pin","Warn: pipCommand not pinned by hash: test/freeze-upstream-requirements.sh:8","Warn: pipCommand not pinned by hash: test/freeze-upstream-requirements.sh:9","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:16","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:17","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:42","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:43","Warn: pipCommand not pinned by hash: .github/workflows/ci_static-analysis.yaml:31","Warn: pipCommand not pinned by hash: .github/workflows/ci_static-analysis.yaml:32","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:53","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:54","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:79","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:80","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:79","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:80","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:99","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:100","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of 153 third-party GitHubAction dependencies pinned","Info:   0 out of  16 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":0,"reason":"25 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-261 / GHSA-wqgp-vphw-hphf","Warn: Project is vulnerable to: GHSA-x5h4-9gqw-942j","Warn: Project is vulnerable to: PYSEC-2014-14 / GHSA-652x-xj99-gmcc","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2014-13 / GHSA-cfj3-7x9c-4p3h","Warn: Project is vulnerable to: PYSEC-2018-28 / GHSA-x84v-xcm2-53pg","Warn: Project is vulnerable to: PYSEC-2013-22 / GHSA-27x4-j476-jp5f","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5","Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579","Warn: Project is vulnerable to: PYSEC-2024-48 / GHSA-fj7x-q9j7-g6q6","Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: GHSA-5cpq-8wj7-hf2v","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9","Warn: Project is vulnerable to: GHSA-w7pp-m8wf-vj6r","Warn: Project is vulnerable to: GHSA-x4qr-2fvf-3mr5","Warn: Project is vulnerable to: GHSA-79v4-65xg-pq4g","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T02:11:55.390Z","repository_id":37271527,"created_at":"2025-08-17T02:11:55.391Z","updated_at":"2025-08-17T02:11:55.391Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36683297,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-15T02:00:05.847Z","response_time":94,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":553,"last_synced_at":"2026-08-21T23:27:01.076Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255755,"followers":16480,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-21T23:27:01.090Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"packages":[{"id":2649273,"name":"aws-encryption-sdk","ecosystem":"pypi","description":"AWS Encryption SDK implementation for Python","homepage":"https://github.com/aws/aws-encryption-sdk-python","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-encryption-sdk-python","keywords_array":["aws-encryption-sdk","aws","kms","encryption"],"namespace":null,"versions_count":37,"first_release_published_at":"2017-03-21T22:06:12.000Z","latest_release_published_at":"2026-05-07T18:41:01.000Z","latest_release_number":"4.0.6","last_synced_at":"2026-08-23T12:03:42.062Z","created_at":"2022-04-10T10:07:54.294Z","updated_at":"2026-08-23T12:03:42.062Z","registry_url":"https://pypi.org/project/aws-encryption-sdk/","install_command":"pip install aws-encryption-sdk --index-url https://pypi.org/simple","documentation_url":"https://aws-encryption-sdk.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","Natural Language :: English","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Programming Language :: Python :: Implementation :: CPython","Topic :: Security","Topic :: Security :: Cryptography"],"normalized_name":"aws-encryption-sdk","project_status":null},"repo_metadata":{"id":37271527,"uuid":"79851305","full_name":"aws/aws-encryption-sdk-python","owner":"aws","description":"AWS Encryption SDK","archived":false,"fork":false,"pushed_at":"2026-08-10T21:15:36.000Z","size":2496,"stargazers_count":253,"open_issues_count":53,"forks_count":89,"subscribers_count":22,"default_branch":"master","last_synced_at":"2026-08-15T10:08:48.871Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/introduction.html","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":"SUPPORT_POLICY.rst","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-01-23T21:43:26.000Z","updated_at":"2026-08-13T12:56:00.000Z","dependencies_parsed_at":"2023-10-03T08:56:37.907Z","dependency_job_id":"c56929b1-117c-4065-9762-4bdb54f40576","html_url":"https://github.com/aws/aws-encryption-sdk-python","commit_stats":{"total_commits":497,"total_committers":39,"mean_commits":"12.743589743589743","dds":0.3843058350100603,"last_synced_commit":"899af22c25fdd5d896817e40514b5ea0e1537e90"},"previous_names":[],"tags_count":30,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-encryption-sdk-python","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/sbom","scorecard":{"id":219396,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-encryption-sdk-python","commit":"cbfab663e94c4ed1db5211886770e1aa403a7c67"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":4,"reason":"5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci_codebuild-tests.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci_codebuild_batch.yml:12","Warn: no topLevel permission defined: .github/workflows/ci_decrypt-oracle.yaml:1","Warn: no topLevel permission defined: .github/workflows/ci_static-analysis.yaml:1","Warn: no topLevel permission defined: .github/workflows/ci_test-vector-handler.yaml:1","Warn: no topLevel permission defined: .github/workflows/ci_tests.yaml:1","Warn: no topLevel permission defined: .github/workflows/daily_ci.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/dependabot-auto-merge.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/push.yml:9","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild-tests.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:369: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:486: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:735: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:741: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:754: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:760: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1139: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1145: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:498: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:504: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:624: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:630: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:717: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:723: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1009: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1015: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1027: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1033: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1214: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1220: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:333: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:588: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:955: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:961: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:642: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:648: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:773: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:779: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1158: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1164: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1195: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1201: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:449: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:991: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:997: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1045: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1051: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:883: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:889: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:901: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:907: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1083: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1089: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1233: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1239: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1252: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1258: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1307: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1313: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:660: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:666: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:679: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:685: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:387: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:810: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:816: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1270: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1276: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1342: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1348: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:937: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:943: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:424: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:430: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:865: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:871: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:570: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:576: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:606: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:612: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:698: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:704: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:847: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:853: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1120: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1126: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:534: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:540: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:552: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:973: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:979: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1324: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1330: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:828: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:834: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:405: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:411: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:792: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:798: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:919: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:925: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1102: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1108: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1288: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1294: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:462: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:468: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:516: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:522: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1177: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1183: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1064: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_codebuild_batch.yml:1070: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_codebuild_batch.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_decrypt-oracle.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_static-analysis.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_static-analysis.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_static-analysis.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_static-analysis.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_test-vector-handler.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_tests.yaml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/ci_tests.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-auto-merge.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/dependabot-auto-merge.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/pull.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/repo-sync.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/repo-sync.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-encryption-sdk-python/repo-sync.yml/master?enable=pin","Warn: pipCommand not pinned by hash: test/freeze-upstream-requirements.sh:8","Warn: pipCommand not pinned by hash: test/freeze-upstream-requirements.sh:9","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:16","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:17","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:42","Warn: pipCommand not pinned by hash: .github/workflows/ci_decrypt-oracle.yaml:43","Warn: pipCommand not pinned by hash: .github/workflows/ci_static-analysis.yaml:31","Warn: pipCommand not pinned by hash: .github/workflows/ci_static-analysis.yaml:32","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:53","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:54","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:79","Warn: pipCommand not pinned by hash: .github/workflows/ci_test-vector-handler.yaml:80","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:79","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:80","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:99","Warn: pipCommand not pinned by hash: .github/workflows/ci_tests.yaml:100","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of 153 third-party GitHubAction dependencies pinned","Info:   0 out of  16 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":0,"reason":"25 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-261 / GHSA-wqgp-vphw-hphf","Warn: Project is vulnerable to: GHSA-x5h4-9gqw-942j","Warn: Project is vulnerable to: PYSEC-2014-14 / GHSA-652x-xj99-gmcc","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2014-13 / GHSA-cfj3-7x9c-4p3h","Warn: Project is vulnerable to: PYSEC-2018-28 / GHSA-x84v-xcm2-53pg","Warn: Project is vulnerable to: PYSEC-2013-22 / GHSA-27x4-j476-jp5f","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5","Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579","Warn: Project is vulnerable to: PYSEC-2024-48 / GHSA-fj7x-q9j7-g6q6","Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: GHSA-5cpq-8wj7-hf2v","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9","Warn: Project is vulnerable to: GHSA-w7pp-m8wf-vj6r","Warn: Project is vulnerable to: GHSA-x4qr-2fvf-3mr5","Warn: Project is vulnerable to: GHSA-79v4-65xg-pq4g","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T02:11:55.390Z","repository_id":37271527,"created_at":"2025-08-17T02:11:55.391Z","updated_at":"2025-08-17T02:11:55.391Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36683297,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-15T02:00:05.847Z","response_time":94,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":553,"last_synced_at":"2026-08-21T23:27:01.076Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255755,"followers":16480,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-21T23:27:01.090Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"v4.0.6","sha":"d45ed4d35ac8ab77f11735c26cc24fb1024517ae","kind":"commit","published_at":"2026-05-07T17:19:12.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v4.0.6","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v4.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.6/manifests"},{"name":"v3.3.1","sha":"3b3039c891eefc07dbe612bd063c60d9b385442b","kind":"commit","published_at":"2026-04-20T18:36:51.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v3.3.1","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v3.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v3.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.3.1/manifests"},{"name":"v4.0.5","sha":"73c7ddb0963b18499e622b5e626db03ef71a8aca","kind":"commit","published_at":"2026-04-18T00:14:32.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v4.0.5","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.5/manifests"},{"name":"v4.0.4","sha":"2153057b32b5d2c6eb3564e0e4f5e5e9459c2f64","kind":"commit","published_at":"2026-02-25T23:41:49.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v4.0.4","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"d316a1835869a27b76ff6dfe8db6897e85f6eebd","kind":"commit","published_at":"2025-09-03T17:56:28.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v4.0.3","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"ee9e3f86903006f256e652a172ae493a2fbbb523","kind":"commit","published_at":"2025-07-02T16:44:43.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v4.0.2","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.2/manifests"},{"name":"v4.0.1","sha":"18352146239976a93dfd26955b5b695e5a62ab68","kind":"commit","published_at":"2025-03-26T22:00:25.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v4.0.1","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"242d974e43ffce424bf5c23c77614270d612f455","kind":"commit","published_at":"2024-11-13T21:08:43.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v4.0.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v4.0.0/manifests"},{"name":"v3.3.0","sha":"e55db0a249599d82c66c46c4dd17057625e8a93c","kind":"commit","published_at":"2024-05-21T18:03:50.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v3.3.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"9f6d7e4e89125241d6df545d374b9b6f912e8bcb","kind":"commit","published_at":"2024-03-18T19:27:25.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v3.2.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.2.0/manifests"},{"name":"v2.5.1","sha":"a5d1a90b1f61dea8644d86bfeb4853af9a322b42","kind":"commit","published_at":"2022-08-30T17:20:04.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v2.5.1","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.5.1/manifests"},{"name":"v1.10.1","sha":"c220d57cf1588b3eb88a07cc54144b21f2265359","kind":"commit","published_at":"2022-08-30T03:06:00.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v1.10.1","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v1.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v1.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.10.1/manifests"},{"name":"v1.10.0","sha":"c2f0c75969db2c29be2fb85ed6b29459c1baf9f6","kind":"commit","published_at":"2022-06-21T17:42:02.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v1.10.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.10.0/manifests"},{"name":"v2.5.0","sha":"77c2d884850adbd4b33081467a12fe2a8f54ac74","kind":"commit","published_at":"2022-06-21T17:41:56.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v2.5.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.5.0/manifests"},{"name":"v3.1.1","sha":"dcb5ee47cb35258f2cd3c4740f5e609e22de32f6","kind":"commit","published_at":"2022-06-20T23:20:14.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v3.1.1","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"7950abd73ee333407d2dadd02ef2d57c3df464cf","kind":"commit","published_at":"2021-11-10T23:52:57.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v3.1.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"40fd1e8e9b06a2a5c1cea65602849539a040f1c8","kind":"commit","published_at":"2021-07-01T21:44:16.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v3.0.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"2f4773fcd72371d86363b833d9f807daf9e1a505","kind":"commit","published_at":"2021-07-01T18:08:47.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v2.4.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"3ed84f7559861845657a22fbf77f66f8eb4f2337","kind":"commit","published_at":"2021-06-16T16:25:36.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v2.3.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"863b04dbbeccf0b4c27009f9c44be470449ec1ea","kind":"commit","published_at":"2021-05-27T20:20:10.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v2.2.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.2.0/manifests"},{"name":"v1.9.0","sha":"5a3b9216b075000d5fcb1dc74936e5ef8a4fa89e","kind":"commit","published_at":"2021-05-27T17:47:57.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v1.9.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.9.0/manifests"},{"name":"2.1.0","sha":"bb2600742a0a0829067aa07c935342ba3ddca929","kind":"commit","published_at":"2021-04-19T16:19:31.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/2.1.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/2.1.0/manifests"},{"name":"v2.0.0","sha":"f03b50b2098ff7869969ea2c5e73a82cefad5245","kind":"commit","published_at":"2020-09-25T01:23:46.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v2.0.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v2.0.0/manifests"},{"name":"v1.7.1","sha":"dd296450adb2e0791fd3720f0eee046e9e7b1099","kind":"commit","published_at":"2020-09-25T00:05:52.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v1.7.1","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v1.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.7.1/manifests"},{"name":"v1.7.0","sha":"02b442f1a5f073d73cc2659c5ace9cf1b597e2fe","kind":"commit","published_at":"2020-09-24T21:14:59.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/v1.7.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/v1.7.0/manifests"},{"name":"1.4.1","sha":"6a309ed7088f03069cace50482c7e57491f92414","kind":"commit","published_at":"2019-09-20T20:54:47.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/1.4.1","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.4.1/manifests"},{"name":"1.4.0","sha":"d6c39a7cc2ba76bb8f67a60f6e269ef8115c62a1","kind":"commit","published_at":"2019-05-23T21:28:21.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/1.4.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.4.0/manifests"},{"name":"1.3.8","sha":"8f047fbba5f208f8b082b2355d60b023e5def361","kind":"commit","published_at":"2018-11-15T19:06:34.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/1.3.8","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.3.8/manifests"},{"name":"1.3.7","sha":"d29643e7df0e01bd6d10c2952e632c281df733c1","kind":"commit","published_at":"2018-09-20T19:04:49.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/1.3.7","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.3.7/manifests"},{"name":"1.3.0","sha":"b6a2bbca4db6ab46d65fe7e2eacfffe25abff3a2","kind":"commit","published_at":"2017-08-04T21:04:13.000Z","download_url":"https://codeload.github.com/aws/aws-encryption-sdk-python/tar.gz/1.3.0","html_url":"https://github.com/aws/aws-encryption-sdk-python/releases/tag/1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-encryption-sdk-python@1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/tags/1.3.0/manifests"}]},"repo_metadata_updated_at":"2026-08-22T14:12:00.063Z","dependent_packages_count":7,"downloads":3661589,"downloads_period":"last-month","dependent_repos_count":51,"rankings":{"downloads":0.393857878971273,"dependent_repos_count":2.0646213301561116,"dependent_packages_count":1.8554551373976274,"stargazers_count":4.587495799346226,"forks_count":4.667563981404585,"docker_downloads_count":0.3775263905650866,"average":2.324420086306818},"purl":"pkg:pypi/aws-encryption-sdk","advisories":[{"uuid":"GSA_kwCzR0hTQS12NjM4LTM4ZmMtcmhmds4ABVwu","url":"https://github.com/advisories/GHSA-v638-38fc-rhfv","title":"AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache","description":"## Summary\nAWS Encryption SDK (ESDK) for Python is a client-side encryption library. An issue exists where, under certain circumstances, a specific cryptographic algorithm downgrade in the caching layer might allow an authenticated local threat actor to bypass key commitment policy enforcement via a shared key cache, resulting in ciphertext that can be decrypted to multiple different plaintexts.\n\n## Impact\nThis issue requires all of the following conditions to be true: (1) Two ESDK for Python clients with different commitment policies share a single CachingCryptoMaterialsManager instance within the same process. (2) The client with the weaker commitment policy encrypts first, warming the cache. (3) Both clients use matching encryption contexts. (4) Both clients use the pre-configured default algorithm suite.\n\nThese conditions may occur during a migration from ESDK for Python v1 to newer versions, as v1 did not support key commitment.\n\nWhen the weaker-policy client encrypts first, the cache stores encryption materials that do not enforce key commitment. Subsequent callers — including those configured to require key commitment — are served these cached materials instead of generating new ones that satisfy their policy. This results in encryption without key commitment, meaning the same ciphertext can be validly decrypted to different plaintexts under different keys (the \"Invisible Salamanders\" issue; see https://github.com/google/security-research/security/advisories/GHSA-wqgp-vphw-hphf). A threat actor who controls ciphertext can cause a recipient to decrypt a message different from what the sender encrypted, breaking message integrity.\n\n## Impacted versions\n- From 2.0 to 2.5.1\n- From 3.0 to 3.3.0\n- From 4.0 to 4.0.4\n\n## Patches\nThis issue has been addressed in ESDK for Python versions 3.3.1 and 4.0.5. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\n## Workarounds\nIf a customer requires operating multiple instances of the Python ESDK each with differently configured key commitment policies, they must not share a key cache.\n\nReferences\nIf there are any questions or comments about this advisory, contact AWS Security through the [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.\n\n## Acknowledgement\nThanks to [1seal.org](http://1seal.org/) for collaborating on this issue through the coordinated vulnerability disclosure process.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-04-24T15:59:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.7,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/aws/aws-encryption-sdk-python/security/advisories/GHSA-v638-38fc-rhfv","https://github.com/google/security-research/security/advisories/GHSA-wqgp-vphw-hphf","https://nvd.nist.gov/vuln/detail/CVE-2026-6550","https://aws.amazon.com/security/security-bulletins/2026-017-aws","https://github.com/aws/aws-encryption-sdk-python/releases/tag/v3.3.1","https://github.com/aws/aws-encryption-sdk-python/releases/tag/v4.0.5","https://github.com/advisories/GHSA-v638-38fc-rhfv"],"source_kind":"github","identifiers":["GHSA-v638-38fc-rhfv","CVE-2026-6550"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-24T16:00:08.293Z","updated_at":"2026-08-11T14:03:57.637Z","epss_percentage":0.00096,"epss_percentile":0.00912,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12NjM4LTM4ZmMtcmhmds4ABVwu","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12NjM4LTM4ZmMtcmhmds4ABVwu","packages":[{"ecosystem":"pypi","package_name":"aws-encryption-sdk","versions":[{"first_patched_version":"4.0.5","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.4"},{"first_patched_version":"3.3.1","vulnerable_version_range":"\u003e= 2.0.0, \u003c 3.3.0"}],"purl":"pkg:pypi/aws-encryption-sdk"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12NjM4LTM4ZmMtcmhmds4ABVwu/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13cWdwLXZwaHctaHBoZs0Wbg","url":"https://github.com/advisories/GHSA-wqgp-vphw-hphf","title":"Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness","description":"Authors: Thai \"[thaidn](https://twitter.com/xorninja)\" Duong\n\n# Summary\n\nThe following security vulnerabilities was discovered and reported to Amazon, affecting AWS KMS and all versions of [AWS Encryption SDKs](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/introduction.html) prior to version 2.0.0:\n\n* **Information leakage**: an attacker can create ciphertexts that would leak the user’s AWS account ID, encryption context, user agent, and IP address upon decryption\n* **Ciphertext forgery**: an attacker can create ciphertexts that are accepted by other users\n* **Robustness**: an attacker can create ciphertexts that decrypt to different plaintexts for different users\n\nThe first two bugs are somewhat surprising because they show that the ciphertext format can lead to vulnerabilities. These bugs (and the infamous [alg: \"None\"](https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/) bugs in JWT) belong to a class of vulnerabilities called **in-band protocol negotiation**. This is the second time we’ve found in-band protocol negotiation vulnerabilities in AWS cryptography libraries; see this [bug](https://github.com/google/security-research/security/advisories/GHSA-7f33-f4f5-xwgw) in S3 Crypto SDK discovered by my colleague Sophie Schmieg.\n\nIn JWT and S3 SDK the culprit is the algorithm field—here it is the key ID. Because the key ID is used to determine which decryption key to use, it can’t be meaningfully authenticated despite being under the attacker’s control. If the key ID is a URL indicating where to fetch the key, the attacker can replace it with their own URL, and learn side-channel information such as the timing and machines on which the decryption happens (this can also lead to [SSRF](https://portswigger.net/web-security/ssrf) issues, but that’s another topic for another day).\n\nIn AWS, the key ID is a unique [Amazon Resource Name](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html). If an attacker were to capture a ciphertext from a user and replace its key ID with their own, the victim’s AWS account ID, encryption context, user agent, and IP address would be logged to the attacker’s AWS account whenever the victim attempted to decrypt the modified ciphertext.\n\nThe last bug shows that the non-committing property of AES-GCM (and other AEAD ciphers such as [AES-GCM-SIV](https://keymaterial.net/2020/09/07/invisible-salamanders-in-aes-gcm-siv/) or (X)ChaCha20Poly1305) is especially problematic in multi-recipient settings. These ciphers have a property that can cause nonidentical plaintexts when decrypting a single ciphertext with two different keys! For example, you can send a single encrypted email to Alice and Bob which, upon decryption, reads “attack” to Alice and “retreat” to Bob. The AWS Encryption SDKs are vulnerable to this attack because they allow a single ciphertext to be generated for multiple recipients, with each decrypting using a different key. I believe this kind of problem is prevalent. I briefly looked at [JWE](https://tools.ietf.org/html/rfc7516) and I think it is vulnerable.\n\n# Mitigations\n\nAmazon has fixed these bugs in release 2.0.0 of the SDKs. A new major version was required because, unfortunately, the fix for the last bug requires a breaking change from earlier versions. All users are recommended to upgrade. More details about Amazon’s mitigations can be found in [their announcement](https://aws.amazon.com/blogs/security/improved-client-side-encryption-explicit-keyids-and-key-commitment/).\n\nWe’re collaborating with Shay Gueron on a paper regarding fast committing AEADs.\n\n# Vulnerabilities\n\n## Information Leakage\n\nThe [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) API in AWS KMS encrypts plaintext into ciphertext by using a customer master key (CMK). The ciphertext format is undocumented, but it contains metadata that specifies the CMK and the encryption algorithm. I reverse-engineered the format and found the location of the CMK. Externally the CMK is identified by its key ARN, but within a ciphertext it is represented by an internal ID, which remained stable during my testing.\n\nWhen I replaced the internal ID of a CMK in a ciphertext with the internal ID of another CMK, I found that AWS KMS attempted to decrypt the ciphertext with the new CMK. The encryption failed and the failure event—including the AWS Account ID, the user agent and the IP address of the caller—was logged to Cloud Trail in the account that owned the replacement CMK.\n\nThis enables the following attack:\n* The attacker creates a CMK that has a key policy that allows access from everyone. This requires no prior knowledge about the victim.\n* The attacker intercepts a ciphertext from the victim, and replaces its CMK with their CMK.\n* Whenever the victim attempts to decrypt the modified ciphertext, the attacker learns the timing of such actions, the victim’s AWS Account ID, user agent, encryption context, and IP address.\n\nThis attack requires the victim to have an IAM policy that allows them to access the attacker’s CMK. I found that this practice was allowed by the AWS Visual Policy Editor, but I don’t know whether it is common.\n\nThe AWS Encryption SDKs also succumb to this attack. The SDKs implement envelope encryption: encrypting data with a data encryption key (DEK) and then wrapping the DEK with a CMK using the Encrypt API in AWS KMS. The wrapped DEK is stored as part of the final ciphertext (format is defined [here](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/message-format.html)). The attacker can mount this attack by replacing the CMK in the wrapped DEK with their own.\n\n```\n{\n    \"eventVersion\": \"1.05\",\n    \"userIdentity\": {\n        \"type\": \"AWSAccount\",\n        \"principalId\": \"\u003credacted this is the principal ID of the victim\u003e\",\n        \"accountId\": \"\u003credacted - this is the AWS account ID of the victim\u003e\"\n    },\n    \"eventTime\": \"2020-06-21T21:05:04Z\",\n    \"eventSource\": \"kms.amazonaws.com\",\n    \"eventName\": \"Decrypt\",\n    \"awsRegion\": \"us-west-2\",\n    \"sourceIPAddress\": \"\u003credacted - this is the IP address of the victim\u003e\",\n    \"userAgent\": \"\u003credacted - this is the user agent of the victim\u003e\",\n    \"errorCode\": \"InvalidCiphertextException\",\n    \"requestParameters\": {\n        // The encryption context might include other data from the victim\n        \"encryptionContext\": {\n            \"aws-crypto-public-key\": \"AzfNOGOnNYFmpHspKrAm1L6XtRybONkmkhmB/IriKSA7b2NsV4MEPMph9yX2KTPKWw==\"\n        },\n        \"encryptionAlgorithm\": \"SYMMETRIC_DEFAULT\"\n    },\n    \"responseElements\": null,\n    \"requestID\": \"aeced8e8-75a2-42c3-96ac-d1fa2a1c5ee6\",\n    \"eventID\": \"780a0a6e-4ad8-43d4-a426-75d05022f870\",\n    \"readOnly\": true,\n    \"resources\": [\n        {\n            \"accountId\": \"\u003credacted - this is the account ID of the attacker\u003e\",\n            \"type\": \"AWS::KMS::Key\",\n            \"ARN\": \u003credacted - this is the key ARN of the attacker\u003e\n        }\n    ],\n    \"eventType\": \"AwsApiCall\",\n    \"recipientAccountId\": \"\u003credacted - this is the account ID of the attacker\u003e\",\n    \"sharedEventID\": \"033e147c-8a36-42f5-9d6c-9e071eb752b7\"\n}\n```\n**Figure 1: A failure event logged to the attacker’s Cloud Trail when the victim attempted to decrypt a modified ciphertext containing the attacker’s CMK.**\n\n## Ciphertext Forgery\n\nThe [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) API in AWS KMS doesn’t require the caller to specify the CMK. This parameter is required only when the ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the metadata that it adds to the ciphertext blob to determine which CMK was used to encrypt the ciphertext.\n\nThis leads to the following attack:\n* The attacker creates a CMK that has a key policy that allows access from everyone. This requires no prior knowledge about the victim.\n* The attacker generates a ciphertext by calling the Encrypt API with their key.\n* The attacker intercepts a ciphertext from the victim, and replaces it entirely with their ciphertext.\n* The victim successfully decrypts the ciphertext, as if it was encrypted under their own key. The attacker also learns when this happened, the victim’s AWS Account ID, user agent, encryption context, and IP address.\n\nSimilar to the information leakage attack, this attack also requires the victim to have an IAM policy that allows them to access the attacker’s CMK.\n\nThe AWS Encryption SDKs also succumb to this attack. They don’t specify the CMK when they call the Decrypt API to unwrap the DEK.\n\n## Robustness\n\nThe AWS Encryption SDKs allow a single ciphertext to be generated for multiple recipients, with each decrypting using a different key. To that end, it wraps the DEK multiple times, each under a different CMK. The wrapped DEKs can be combined to form a single ciphertext which can be sent to multiple recipients who can use their own credentials to decrypt it. It’s reasonable to expect that all recipients should decrypt the ciphertext to an identical plaintext. However, because of the use of AES-GMAC and AES-GCM, it’s possible to create a ciphertext that decrypts to two valid yet different plaintexts for two different users. In other words, the AWS Encryption SDKs are [not](https://eprint.iacr.org/2008/440.pdf) [robust](https://eprint.iacr.org/2019/016.pdf).\n\nThe encryption of a message under two CMKs can be summarized as follows:\n* A DEK is randomly generated, and two wrapped DEKs are produced by calling the Encrypt API using the two CMKs\n* A per-message AES-GCM key (K) is derived using HKDF from the DEK, a randomly generated message ID, and a fixed algorithm ID.\n* A header is formed from the wrapped DEKs, the encryption context, and other metadata. A header authentication tag is computed on the header using AES-GMAC with K and a zero IV.\n* The message is encrypted using AES-GCM with K, a non-zero IV, and fixed associated additional data. This produces a message authentication tag.\n* The ciphertext consists of the header, the header authentication tag, the encrypted message, and the message authentication tag.\n\n(There’s also a self-signed digital signature that is irrelevant to this discussion).\n\nIn order to decrypt a ciphertext, the AWS Encryption SDKs loops over the list of wrapped DEKs and returns the first one that it can successfully unwrap. The attacker therefore can wrap a unique DEK for each recipient. Next, the attacker exploits the non-committing property of GMAC to produce two messages that have the same GMAC tag under two different keys. The attacker has to do this twice, one for the header authentication tag and one for the message authentication tag.\n\n```\nGiven a data blob B of one 128-bit block B_1, a GMAC tag is computed as follows:\n\nB_1 * H^2 + B_len * H + J\n\nwhere H and J depends on the key and B_len depends on the length of B.\n\nTo find a message that can produce the same tag under two different keys, one\ncan add append to B a new block B_2 whose value can be deduced by solving\nan algebraic equation. That is, we want to find B_2 such that:\n\nB_1 * H^3 + B_2 * H^2 + B_len * H + J = B_1 * H’^3 + B_2 * H’^2 + B_len * H’ + J’\n\nwhere H’ and J’ are the corresponding H and J of the other key.\n\nB_2 is the only unknown value in this equation, thus it can be computed using\nfinite field arithmetics of GF(2^128):\n\nB_2 = [B_1 * (H^3+H’^3) + B_len * (H + H’) + J + J’] * (H^2 + H’^2)^-1.\n```\n**Figure 2: How to find a message that has the same GMAC tag under two different keys.**\n\nThe overall attack works as follows:\n* The attacker generates a random DEK, derives a per-message key K, and encrypts message M with it using AES in counter mode. This generates a ciphertext C.\n* The attacker generates another random DEK’, derives a per-message key K’, and performs trial decryption of C until the decrypted message M’ has desirable properties. For example, if the attacker wants the first bit of M’ different from that of M, this process should only take a few attempts.\n* The attacker finds a block C* such that the GMAC of C’ = C || C* under K and K’ are identical. Denote this tag C’_tag.\n* The attacker wraps DEK and DEK’ under two recipients’ CMK.\n* The attacker forms a header H and adds a block H* to the encryption context such that the new H’ has the same authentication tag H’_tag under K and K’.\n* The attacker output H’, H’_tag, C’, C’_tag.\n\nThis attack is similar to the one discovered in [Facebook Messenger](https://eprint.iacr.org/2019/016.pdf).\n\n# Acknowledgement\n\nI’m grateful to Jen Barnason for carefully editing this advisory. I will never publish anything without her approval! I want to thank my friend and coworker Sophie “Queen of Hashing” Schmieg for wonderful discussions and for showing me how the arithmetic in GF(2^128) works. I want to thank Jonathan Bannet for asking the questions that led to this work.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-10-12T16:01:12.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.6,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/google/security-research/security/advisories/GHSA-wqgp-vphw-hphf","https://nvd.nist.gov/vuln/detail/CVE-2020-8897","https://aws.amazon.com/blogs/security/improved-client-side-encryption-explicit-keyids-and-key-commitment","https://github.com/pypa/advisory-database/tree/main/vulns/aws-encryption-sdk/PYSEC-2020-261.yaml","https://github.com/advisories/GHSA-wqgp-vphw-hphf"],"source_kind":"github","identifiers":["GHSA-wqgp-vphw-hphf","CVE-2020-8897"],"repository_url":null,"blast_radius":31.09807467679864,"created_at":"2022-12-21T16:12:44.897Z","updated_at":"2026-08-14T00:11:12.029Z","epss_percentage":0.00399,"epss_percentile":0.3282,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cWdwLXZwaHctaHBoZs0Wbg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13cWdwLXZwaHctaHBoZs0Wbg","packages":[{"ecosystem":"pypi","package_name":"aws-encryption-sdk","versions":[{"first_patched_version":"2.0.0","vulnerable_version_range":"\u003c 2.0.0"}],"purl":"pkg:pypi/aws-encryption-sdk"},{"ecosystem":"maven","package_name":"com.amazonaws:aws-encryption-sdk-java","versions":[{"first_patched_version":"2.0.0","vulnerable_version_range":"\u003c 2.0.0"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cWdwLXZwaHctaHBoZs0Wbg/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg1aDQtOWdxdy05NDJq","url":"https://github.com/advisories/GHSA-x5h4-9gqw-942j","title":"Improper Verification of Cryptographic Signature in aws-encryption-sdk","description":"### Impact\n\nThis advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. \n\nThis ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In addition to these signatures, the ESDK uses AES-GCM encryption and all plaintext is verified before being released to a caller. There is no impact on the integrity of the ciphertext or decrypted plaintext, however some callers may rely on the the ECDSA signature for non-repudiation. Without validating the ECDSA signature, an actor with trusted KMS permissions to decrypt a message may also be able to encrypt messages. This update introduces a new API for callers who wish to stream only unsigned messages. \n\nFor customers who process ESDK messages from untrusted sources, this update also introduces a new configuration to limit the number of Encrypted Data Keys (EDKs) that the ESDK will attempt to process per message. This configuration provides customers with a way to limit the number of AWS KMS Decrypt API calls that the ESDK will make per message. This setting will reject messages with more EDKs than the configured limit.\n\nFinally, this update adds early rejection of invalid messages with certain invalid combinations of algorithm suite and header data.\n\n### Patches\n\nFixed in versions 1.9 and 2.2. We recommend that all users upgrade to address these issues.\n\nCustomers leveraging the ESDK’s streaming features have several options to protect signature validation. One is to ensure that client code reads to the end of the stream before using released plaintext. With this release, using the new API for streaming and falling back to the non-streaming decrypt API for signed messages prevents using any plaintext from signed data before the signature is validated. See https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/about-versions.html#version2.2.x\n\nUsers processing ESDK messages from untrusted sources should use the new maximum encrypted data keys parameter. See https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/about-versions.html#version2.2.x\n\n### Workarounds\n\nNone\n\n### For more information\n\nhttps://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/concepts.html#digital-sigs\n\nhttps://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/about-versions.html#version2.2.x\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-06-01T21:17:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/aws/aws-encryption-sdk-python/security/advisories/GHSA-x5h4-9gqw-942j","https://github.com/advisories/GHSA-x5h4-9gqw-942j"],"source_kind":"github","identifiers":["GHSA-x5h4-9gqw-942j"],"repository_url":"https://github.com/aws/aws-encryption-sdk-python","blast_radius":0.0,"created_at":"2022-12-21T16:13:00.124Z","updated_at":"2026-08-15T20:21:44.808Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg1aDQtOWdxdy05NDJq","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg1aDQtOWdxdy05NDJq","packages":[{"ecosystem":"pypi","package_name":"aws-encryption-sdk","versions":[{"first_patched_version":"2.2.0","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.2.0"},{"first_patched_version":"1.9.0","vulnerable_version_range":"\u003c 1.9.0"}],"purl":"pkg:pypi/aws-encryption-sdk"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg1aDQtOWdxdy05NDJq/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/aws-encryption-sdk","docker_dependents_count":9,"docker_downloads_count":201749688,"usage_url":"https://repos.ecosyste.ms/usage/pypi/aws-encryption-sdk","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/aws-encryption-sdk/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T11:31:07.120Z","issues_count":25,"pull_requests_count":410,"avg_time_to_close_issue":13413188.333333334,"avg_time_to_close_pull_request":3118956.0875706216,"issues_closed_count":15,"pull_requests_closed_count":354,"pull_request_authors_count":22,"issue_authors_count":24,"avg_comments_per_issue":1.24,"avg_comments_per_pull_request":0.5317073170731708,"merged_pull_requests_count":175,"bot_issues_count":0,"bot_pull_requests_count":209,"past_year_issues_count":3,"past_year_pull_requests_count":20,"past_year_avg_time_to_close_issue":9155394.333333334,"past_year_avg_time_to_close_pull_request":459792.8333333333,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":12,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.25,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":9,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/issues","maintainers":[{"login":"rishav-karanjit","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rishav-karanjit"},{"login":"mattsb42-aws","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattsb42-aws"}],"active_maintainers":[{"login":"rishav-karanjit","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rishav-karanjit"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/aws-encryption-sdk/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/aws-encryption-sdk/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/aws-encryption-sdk/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/aws-encryption-sdk/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/aws-encryption-sdk/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/aws-encryption-sdk/codemeta","maintainers":[{"uuid":"aws-crypto-builder-tools","login":"aws-crypto-builder-tools","name":null,"email":null,"url":null,"packages_count":59,"html_url":"https://pypi.org/user/aws-crypto-builder-tools/","role":null,"created_at":"2023-02-23T16:21:02.939Z","updated_at":"2023-02-23T16:21:02.939Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/aws-crypto-builder-tools/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":930432,"maintainers_count":399682,"namespaces_count":0,"keywords_count":311773,"github":"pypi","metadata":{"funded_packages_count":58574,"rate_limit":2},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2026-08-24T05:05:47.334Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}}],"commits":{"id":539504,"full_name":"aws/aws-encryption-sdk-python","default_branch":"master","total_commits":521,"total_committers":39,"total_bot_commits":48,"total_bot_committers":2,"mean_commits":13.35897435897436,"dds":0.4126679462571977,"past_year_total_commits":17,"past_year_total_committers":8,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":2.125,"past_year_dds":0.6470588235294117,"last_synced_at":"2026-08-19T10:01:34.745Z","last_synced_commit":"2c0200b5a91c3f08eb72f9cd9f6f0ad19efe3cc5","created_at":"2023-03-09T04:08:53.825Z","updated_at":"2026-08-19T10:01:33.697Z","committers":[{"name":"mattsb42-aws","email":"bullocm@amazon.com","login":"mattsb42-aws","count":306},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":47},{"name":"Ben Farley","email":"47006790+farleyb-amazon","login":"farleyb-amazon","count":32},{"name":"Tony Knapp","email":"5892063+texastony","login":"texastony","count":19},{"name":"Lucas McDonald","email":"lucasmcdonald3@gmail.com","login":"lucasmcdonald3","count":17},{"name":"Andrés Sánchez","email":"42875859+AndresSan6","login":"AndresSan6","count":16},{"name":"José Corella","email":"39066999+josecorella","login":"josecorella","count":14},{"name":"lavaleri","email":"49660121+lavaleri","login":"lavaleri","count":6},{"name":"seebees","email":"ryanemer@amazon.com","login":"seebees","count":6},{"name":"MeghaShetty","email":"mshetty@usc.edu","login":"MeghaShetty","count":5},{"name":"Rishav karanjit","email":"karanjitrishav4@gmail.com","login":"rishav-karanjit","count":5},{"name":"Caitlin Tibbetts","email":"tibbetc@amazon.com","login":"caitlin-tibbetts","count":5},{"name":"Ritvik Kapila","email":"61410899+RitvikKapila","login":"RitvikKapila","count":4},{"name":"lizroth","email":"30636882+lizroth","login":"lizroth","count":4},{"name":"June Blender","email":"juneblender@gmail.com","login":"juneb","count":3},{"name":"Darwin Chowdary","email":"39110935+imabhichow","login":"imabhichow","count":3},{"name":"Alex Chew","email":"alex-chew","login":"alex-chew","count":3},{"name":"Robin Salkeld","email":"salkeldr@amazon.com","login":"robin-aws","count":2},{"name":"Alex Gaynor","email":"alex.gaynor@gmail.com","login":"alex","count":2},{"name":"Shubham Chaturvedi","email":"shubhamchaturvedi7@gmail.com","login":null,"count":2},{"name":"Shubham Chaturvedi","email":"anotherosscontributor@gmail.com","login":"ShubhamChaturvedi7","count":2},{"name":"sharmabikram","email":"sharmabikram111@gmail.com","login":"sharmabikram","count":1},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":1},{"name":"cjkindel","email":"cjkindel","login":"cjkindel","count":1},{"name":"Sean McLaughlin","email":"seanmcl@gmail.com","login":"seanmcl","count":1},{"name":"Ryan Ragona","email":"ryanragona@gmail.com","login":"ragona","count":1},{"name":"Nitin Tejuja","email":"40491064+nitinNT","login":"nitinNT","count":1},{"name":"Nisarg Raval","email":"nisargraval95@gmail.com","login":"nraval1729","count":1},{"name":"Lucas Coutinho","email":"lrclucas@gmail.com","login":"lucasrc","count":1},{"name":"Kess Plasmeier","email":"76071473+kessplas","login":"kessplas","count":1},{"name":"Kess Plasmeier","email":"76071473+justplaz","login":"justplaz","count":1},{"name":"Josh","email":"jowillia@gmail.com","login":"karlw00t","count":1},{"name":"John Walker","email":"jhwal@amazon.com","login":"johnwalker","count":1},{"name":"Jacob Peddicord","email":"jacob@peddicord.net","login":"jpeddicord","count":1},{"name":"Gábor Lipták","email":"gliptak@gmail.com","login":"gliptak","count":1},{"name":"Bohdan","email":"polamayster@gmail.com","login":"polamayster","count":1},{"name":"Ben Bridts","email":"ben.bridts@gmail.com","login":"benbridts","count":1},{"name":"Andrew Jewell","email":"107044381+ajewellamz","login":"ajewellamz","count":1},{"name":"ABDUL SATTAR MAPARA","email":"32198670+abdulsmapara","login":"abdulsmapara","count":1}],"past_year_committers":[{"name":"José Corella","email":"39066999+josecorella","login":"josecorella","count":6},{"name":"Rishav karanjit","email":"karanjitrishav4@gmail.com","login":"rishav-karanjit","count":5},{"name":"sharmabikram","email":"sharmabikram111@gmail.com","login":"sharmabikram","count":1},{"name":"seebees","email":"ryanemer@amazon.com","login":"seebees","count":1},{"name":"Tony Knapp","email":"5892063+texastony","login":"texastony","count":1},{"name":"Lucas McDonald","email":"lucasmcdonald3@gmail.com","login":"lucasmcdonald3","count":1},{"name":"Kess Plasmeier","email":"76071473+kessplas","login":"kessplas","count":1},{"name":"Alex Gaynor","email":"alex.gaynor@gmail.com","login":"alex","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6750914,"commits_count":978124663,"contributors_count":41232052,"owners_count":1358723,"committers_count":3352629,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"aws/aws-encryption-sdk-python","html_url":"https://github.com/aws/aws-encryption-sdk-python","last_synced_at":"2026-08-23T12:03:36.340Z","status":null,"issues_count":25,"pull_requests_count":410,"avg_time_to_close_issue":13413188.333333334,"avg_time_to_close_pull_request":3118956.0875706216,"issues_closed_count":15,"pull_requests_closed_count":354,"pull_request_authors_count":22,"issue_authors_count":24,"avg_comments_per_issue":1.24,"avg_comments_per_pull_request":0.5317073170731708,"merged_pull_requests_count":175,"bot_issues_count":0,"bot_pull_requests_count":209,"past_year_issues_count":3,"past_year_pull_requests_count":20,"past_year_avg_time_to_close_issue":9155394.333333334,"past_year_avg_time_to_close_pull_request":459792.8333333333,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":12,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.25,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":9,"created_at":"2023-05-14T09:26:46.865Z","updated_at":"2026-08-23T12:03:36.340Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-encryption-sdk-python/issues","issue_labels_count":{"table":{"enhancement":3,"good first issue":2,"requires followup":1,"maintenance":1}},"pull_request_labels_count":{"table":{"dependency breaking change":184,"python":183,"github_actions":25,"dependencies":25}},"issue_author_associations_count":{"table":{"NONE":19,"CONTRIBUTOR":6}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":397,"NONE":8,"MEMBER":5}},"issue_authors":{"table":{"ShubhamChaturvedi7":2,"mastak":1,"darkpssngr":1,"anna-shcherbak":1,"mkamioner":1,"surajtikoo":1,"sudhirj":1,"andrey-guzco":1,"aditya1709":1,"alex-chew":1,"benkehoe":1,"farleyb-amazon":1,"NicolasVelazquez":1,"lindycoder":1,"snowuyl":1,"HUSSTECH":1,"jvan1997":1,"orenmazor":1,"Pervej-Alam":1,"gliptak":1,"jai-galgal":1,"texastony":1,"dtataru-bainbridge":1,"WillChilds-Klein":1}},"pull_request_authors":{"table":{"dependabot[bot]":209,"lucasmcdonald3":81,"RitvikKapila":40,"texastony":27,"josecorella":15,"imabhichow":9,"ShubhamChaturvedi7":6,"rishav-karanjit":4,"justplaz":2,"alex":2,"avishmehta68710":2,"seebees":2,"ajewellamz":2,"gliptak":1,"kiwigitops":1,"mattsb42-aws":1,"mastak":1,"sharmabikram":1,"nitinNT":1,"kessplas":1,"jlenart":1,"arpitjain099":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-24T00:00:06.384Z","repositories_count":16301769,"issues_count":42335015,"pull_requests_count":134763975,"authors_count":11516393,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":1,"github_actions":1}},"past_year_issue_author_associations_count":{"table":{"NONE":3}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":13,"MEMBER":4,"NONE":3}},"past_year_issue_authors":{"table":{"andrey-guzco":1,"jvan1997":1,"WillChilds-Klein":1}},"past_year_pull_request_authors":{"table":{"josecorella":5,"rishav-karanjit":4,"lucasmcdonald3":2,"alex":1,"arpitjain099":1,"dependabot[bot]":1,"jlenart":1,"kessplas":1,"kiwigitops":1,"sharmabikram":1,"ShubhamChaturvedi7":1,"texastony":1}},"maintainers":[{"table":{"login":"rishav-karanjit","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rishav-karanjit"}},{"table":{"login":"mattsb42-aws","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattsb42-aws"}}],"active_maintainers":[{"table":{"login":"rishav-karanjit","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rishav-karanjit"}}]}},"events":{"total":{"ReleaseEvent":4,"DeleteEvent":50,"PullRequestEvent":113,"ForkEvent":5,"IssuesEvent":8,"WatchEvent":10,"IssueCommentEvent":40,"PushEvent":224,"PullRequestReviewEvent":52,"PullRequestReviewCommentEvent":22,"CreateEvent":62},"last_year":{"ReleaseEvent":1,"DeleteEvent":8,"PullRequestEvent":12,"ForkEvent":2,"IssuesEvent":3,"WatchEvent":4,"IssueCommentEvent":1,"PushEvent":63,"PullRequestReviewCommentEvent":7,"PullRequestReviewEvent":9,"CreateEvent":10}},"keywords":[],"dependencies":[{"ecosystem":"pypi","filepath":"decrypt_oracle/requirements-actual.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:29.056Z","updated_at":"2022-07-15T21:01:29.056Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/decrypt_oracle/requirements-actual.txt","dependencies":[{"id":224869207,"package_name":"chalice","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":224869208,"package_name":"aws-encryption-sdk","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"decrypt_oracle/test/requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:29.597Z","updated_at":"2022-07-15T21:01:29.597Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/decrypt_oracle/test/requirements.txt","dependencies":[{"id":224876178,"package_name":"mock","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":224876179,"package_name":"pytest","ecosystem":"pypi","requirements":"\u003e=3.3.1","direct":true,"kind":"runtime","optional":false},{"id":224876180,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":224876181,"package_name":"pytest-mock","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":224876182,"package_name":"requests","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"dev_requirements/ci-requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:30.156Z","updated_at":"2022-07-15T21:01:30.156Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/dev_requirements/ci-requirements.txt","dependencies":[{"id":224883729,"package_name":"tox","ecosystem":"pypi","requirements":"==3.24.5","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"dev_requirements/doc-requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:30.517Z","updated_at":"2022-07-15T21:01:30.517Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/dev_requirements/doc-requirements.txt","dependencies":[{"id":224886553,"package_name":"sphinx","ecosystem":"pypi","requirements":"==4.4.0","direct":true,"kind":"runtime","optional":false},{"id":224886554,"package_name":"sphinx_rtd_theme","ecosystem":"pypi","requirements":"==1.0.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"dev_requirements/linter-requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:30.635Z","updated_at":"2022-07-15T21:01:30.635Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/dev_requirements/linter-requirements.txt","dependencies":[{"id":224888864,"package_name":"bandit","ecosystem":"pypi","requirements":"==1.7.4","direct":true,"kind":"runtime","optional":false},{"id":224888865,"package_name":"black","ecosystem":"pypi","requirements":"==22.3.0","direct":true,"kind":"runtime","optional":false},{"id":224888866,"package_name":"doc8","ecosystem":"pypi","requirements":"==0.10.1","direct":true,"kind":"runtime","optional":false},{"id":224888867,"package_name":"flake8","ecosystem":"pypi","requirements":"==4.0.1","direct":true,"kind":"runtime","optional":false},{"id":224888868,"package_name":"flake8-bugbear","ecosystem":"pypi","requirements":"==22.1.11","direct":true,"kind":"runtime","optional":false},{"id":224888869,"package_name":"flake8-docstrings","ecosystem":"pypi","requirements":"==1.6.0","direct":true,"kind":"runtime","optional":false},{"id":224888870,"package_name":"flake8-print","ecosystem":"pypi","requirements":"==4.0.0","direct":true,"kind":"runtime","optional":false},{"id":224888871,"package_name":"isort","ecosystem":"pypi","requirements":"==5.10.1","direct":true,"kind":"runtime","optional":false},{"id":224888872,"package_name":"pyflakes","ecosystem":"pypi","requirements":"==2.4.0","direct":true,"kind":"runtime","optional":false},{"id":224888873,"package_name":"pylint","ecosystem":"pypi","requirements":"==2.13.5","direct":true,"kind":"runtime","optional":false},{"id":224888874,"package_name":"readme_renderer","ecosystem":"pypi","requirements":"==34.0","direct":true,"kind":"runtime","optional":false},{"id":224888875,"package_name":"seed-isort-config","ecosystem":"pypi","requirements":"==2.2.0","direct":true,"kind":"runtime","optional":false},{"id":224888876,"package_name":"vulture","ecosystem":"pypi","requirements":"==2.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"dev_requirements/release-requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:30.849Z","updated_at":"2022-07-15T21:01:30.849Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/dev_requirements/release-requirements.txt","dependencies":[{"id":224890429,"package_name":"pypi-parker","ecosystem":"pypi","requirements":"==0.1.2","direct":true,"kind":"runtime","optional":false},{"id":224890430,"package_name":"setuptools","ecosystem":"pypi","requirements":"==62.0.0","direct":true,"kind":"runtime","optional":false},{"id":224890431,"package_name":"twine","ecosystem":"pypi","requirements":"==4.0.1","direct":true,"kind":"runtime","optional":false},{"id":224890432,"package_name":"wheel","ecosystem":"pypi","requirements":"==0.37.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"dev_requirements/test-requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:31.003Z","updated_at":"2022-07-15T21:01:31.003Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/dev_requirements/test-requirements.txt","dependencies":[{"id":224892771,"package_name":"mock","ecosystem":"pypi","requirements":"==4.0.3","direct":true,"kind":"runtime","optional":false},{"id":224892772,"package_name":"pytest","ecosystem":"pypi","requirements":"==7.0.1","direct":true,"kind":"runtime","optional":false},{"id":224892773,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"==3.0.0","direct":true,"kind":"runtime","optional":false},{"id":224892774,"package_name":"pytest-mock","ecosystem":"pypi","requirements":"==3.6.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:31.037Z","updated_at":"2022-07-15T21:01:31.037Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/requirements.txt","dependencies":[{"id":224892775,"package_name":"boto3","ecosystem":"pypi","requirements":"\u003e=1.10.0","direct":true,"kind":"runtime","optional":false},{"id":224892776,"package_name":"cryptography","ecosystem":"pypi","requirements":"\u003e=2.5.0","direct":true,"kind":"runtime","optional":false},{"id":224892777,"package_name":"attrs","ecosystem":"pypi","requirements":"\u003e=17.4.0","direct":true,"kind":"runtime","optional":false},{"id":224892778,"package_name":"wrapt","ecosystem":"pypi","requirements":"\u003e=1.10.11","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"test/upstream-requirements-py37.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:31.084Z","updated_at":"2022-07-15T21:01:31.084Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/test/upstream-requirements-py37.txt","dependencies":[{"id":224892823,"package_name":"attrs","ecosystem":"pypi","requirements":"==21.2.0","direct":true,"kind":"runtime","optional":false},{"id":224892824,"package_name":"boto3","ecosystem":"pypi","requirements":"==1.17.92","direct":true,"kind":"runtime","optional":false},{"id":224892825,"package_name":"botocore","ecosystem":"pypi","requirements":"==1.20.92","direct":true,"kind":"runtime","optional":false},{"id":224892826,"package_name":"cffi","ecosystem":"pypi","requirements":"==1.14.5","direct":true,"kind":"runtime","optional":false},{"id":224892827,"package_name":"coverage","ecosystem":"pypi","requirements":"==5.5","direct":true,"kind":"runtime","optional":false},{"id":224892828,"package_name":"cryptography","ecosystem":"pypi","requirements":"==3.4.7","direct":true,"kind":"runtime","optional":false},{"id":224892829,"package_name":"importlib-metadata","ecosystem":"pypi","requirements":"==4.5.0","direct":true,"kind":"runtime","optional":false},{"id":224892830,"package_name":"iniconfig","ecosystem":"pypi","requirements":"==1.1.1","direct":true,"kind":"runtime","optional":false},{"id":224892831,"package_name":"jmespath","ecosystem":"pypi","requirements":"==0.10.0","direct":true,"kind":"runtime","optional":false},{"id":224892832,"package_name":"mock","ecosystem":"pypi","requirements":"==4.0.3","direct":true,"kind":"runtime","optional":false},{"id":224892833,"package_name":"packaging","ecosystem":"pypi","requirements":"==20.9","direct":true,"kind":"runtime","optional":false},{"id":224892834,"package_name":"pluggy","ecosystem":"pypi","requirements":"==0.13.1","direct":true,"kind":"runtime","optional":false},{"id":224892835,"package_name":"py","ecosystem":"pypi","requirements":"==1.10.0","direct":true,"kind":"runtime","optional":false},{"id":224892836,"package_name":"pycparser","ecosystem":"pypi","requirements":"==2.20","direct":true,"kind":"runtime","optional":false},{"id":224892837,"package_name":"pyparsing","ecosystem":"pypi","requirements":"==2.4.7","direct":true,"kind":"runtime","optional":false},{"id":224892838,"package_name":"pytest","ecosystem":"pypi","requirements":"==6.2.4","direct":true,"kind":"runtime","optional":false},{"id":224892839,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"==2.12.1","direct":true,"kind":"runtime","optional":false},{"id":224892840,"package_name":"pytest-mock","ecosystem":"pypi","requirements":"==3.6.1","direct":true,"kind":"runtime","optional":false},{"id":224892841,"package_name":"python-dateutil","ecosystem":"pypi","requirements":"==2.8.1","direct":true,"kind":"runtime","optional":false},{"id":224892842,"package_name":"s3transfer","ecosystem":"pypi","requirements":"==0.4.2","direct":true,"kind":"runtime","optional":false},{"id":224892843,"package_name":"six","ecosystem":"pypi","requirements":"==1.16.0","direct":true,"kind":"runtime","optional":false},{"id":224892844,"package_name":"toml","ecosystem":"pypi","requirements":"==0.10.2","direct":true,"kind":"runtime","optional":false},{"id":224892845,"package_name":"typing-extensions","ecosystem":"pypi","requirements":"==3.10.0.0","direct":true,"kind":"runtime","optional":false},{"id":224892846,"package_name":"urllib3","ecosystem":"pypi","requirements":"==1.26.5","direct":true,"kind":"runtime","optional":false},{"id":224892847,"package_name":"wrapt","ecosystem":"pypi","requirements":"==1.12.1","direct":true,"kind":"runtime","optional":false},{"id":224892848,"package_name":"zipp","ecosystem":"pypi","requirements":"==3.4.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"test_vector_handlers/requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:31.092Z","updated_at":"2022-07-15T21:01:31.092Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/test_vector_handlers/requirements.txt","dependencies":[{"id":224892849,"package_name":"attrs","ecosystem":"pypi","requirements":"\u003e=17.4.0","direct":true,"kind":"runtime","optional":false},{"id":224892850,"package_name":"aws-encryption-sdk","ecosystem":"pypi","requirements":"\u003e=2.3.0","direct":true,"kind":"runtime","optional":false},{"id":224892851,"package_name":"pytest","ecosystem":"pypi","requirements":"\u003e=3.3.1","direct":true,"kind":"runtime","optional":false},{"id":224892852,"package_name":"six","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"test_vector_handlers/test/requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-15T21:01:31.098Z","updated_at":"2022-07-15T21:01:31.098Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/test_vector_handlers/test/requirements.txt","dependencies":[{"id":224892853,"package_name":"mock","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":224892854,"package_name":"pytest","ecosystem":"pypi","requirements":"\u003e=3.3.1","direct":true,"kind":"runtime","optional":false},{"id":224892855,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":224892856,"package_name":"pytest-mock","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci_decrypt-oracle.yaml","sha":null,"kind":"manifest","created_at":"2023-02-14T22:46:05.050Z","updated_at":"2023-02-14T22:46:05.050Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/.github/workflows/ci_decrypt-oracle.yaml","dependencies":[{"id":7669608948,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7669608952,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci_static-analysis.yaml","sha":null,"kind":"manifest","created_at":"2023-02-14T22:46:05.284Z","updated_at":"2023-02-14T22:46:05.284Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/.github/workflows/ci_static-analysis.yaml","dependencies":[{"id":7669609575,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7669609576,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci_test-vector-handler.yaml","sha":null,"kind":"manifest","created_at":"2023-02-14T22:46:05.354Z","updated_at":"2023-02-14T22:46:05.354Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/.github/workflows/ci_test-vector-handler.yaml","dependencies":[{"id":7669609989,"package_name":"aws-actions/configure-aws-credentials","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7669609990,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7669609991,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci_tests.yaml","sha":null,"kind":"manifest","created_at":"2023-02-14T22:46:05.483Z","updated_at":"2023-02-14T22:46:05.483Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/.github/workflows/ci_tests.yaml","dependencies":[{"id":7669610200,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7669610201,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/dependabot-auto-merge.yml","sha":null,"kind":"manifest","created_at":"2023-02-14T22:46:05.593Z","updated_at":"2023-02-14T22:46:05.593Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/.github/workflows/dependabot-auto-merge.yml","dependencies":[{"id":7669610809,"package_name":"dependabot/fetch-metadata","ecosystem":"actions","requirements":"v1.3.6","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/repo-sync.yml","sha":null,"kind":"manifest","created_at":"2023-02-14T22:46:05.982Z","updated_at":"2023-02-14T22:46:05.982Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/.github/workflows/repo-sync.yml","dependencies":[{"id":7669613784,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7669613785,"package_name":"repo-sync/github-sync","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7669613786,"package_name":"repo-sync/pull-request","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"pypi","filepath":"test/upstream-requirements-py311.txt","sha":null,"kind":"manifest","created_at":"2023-02-14T22:46:06.252Z","updated_at":"2023-02-14T22:46:06.252Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/test/upstream-requirements-py311.txt","dependencies":[{"id":7669613979,"package_name":"attrs","ecosystem":"pypi","requirements":"==22.2.0","direct":true,"kind":"test","optional":false},{"id":7669613980,"package_name":"boto3","ecosystem":"pypi","requirements":"==1.26.54","direct":true,"kind":"test","optional":false},{"id":7669613981,"package_name":"botocore","ecosystem":"pypi","requirements":"==1.29.54","direct":true,"kind":"test","optional":false},{"id":7669613982,"package_name":"cffi","ecosystem":"pypi","requirements":"==1.15.1","direct":true,"kind":"test","optional":false},{"id":7669613983,"package_name":"coverage","ecosystem":"pypi","requirements":"==7.0.5","direct":true,"kind":"test","optional":false},{"id":7669613984,"package_name":"cryptography","ecosystem":"pypi","requirements":"==39.0.0","direct":true,"kind":"test","optional":false},{"id":7669613985,"package_name":"iniconfig","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"test","optional":false},{"id":7669613986,"package_name":"jmespath","ecosystem":"pypi","requirements":"==1.0.1","direct":true,"kind":"test","optional":false},{"id":7669613987,"package_name":"mock","ecosystem":"pypi","requirements":"==4.0.3","direct":true,"kind":"test","optional":false},{"id":7669613996,"package_name":"packaging","ecosystem":"pypi","requirements":"==23.0","direct":true,"kind":"test","optional":false},{"id":7669613997,"package_name":"pluggy","ecosystem":"pypi","requirements":"==1.0.0","direct":true,"kind":"test","optional":false},{"id":7669613998,"package_name":"pycparser","ecosystem":"pypi","requirements":"==2.21","direct":true,"kind":"test","optional":false},{"id":7669613999,"package_name":"pytest","ecosystem":"pypi","requirements":"==7.2.0","direct":true,"kind":"test","optional":false},{"id":7669614000,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"==3.0.0","direct":true,"kind":"test","optional":false},{"id":7669614002,"package_name":"pytest-mock","ecosystem":"pypi","requirements":"==3.6.1","direct":true,"kind":"test","optional":false},{"id":7669614004,"package_name":"python-dateutil","ecosystem":"pypi","requirements":"==2.8.2","direct":true,"kind":"test","optional":false},{"id":7669614005,"package_name":"s3transfer","ecosystem":"pypi","requirements":"==0.6.0","direct":true,"kind":"test","optional":false},{"id":7669614015,"package_name":"six","ecosystem":"pypi","requirements":"==1.16.0","direct":true,"kind":"test","optional":false},{"id":7669614017,"package_name":"urllib3","ecosystem":"pypi","requirements":"==1.26.14","direct":true,"kind":"test","optional":false},{"id":7669614019,"package_name":"wrapt","ecosystem":"pypi","requirements":"==1.14.1","direct":true,"kind":"test","optional":false}]},{"ecosystem":"pypi","filepath":"decrypt_oracle/requirements.txt","sha":null,"kind":"manifest","created_at":"2023-10-03T08:56:37.754Z","updated_at":"2023-10-03T08:56:37.754Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/decrypt_oracle/requirements.txt","dependencies":[]},{"ecosystem":"pypi","filepath":"decrypt_oracle/setup.py","sha":null,"kind":"manifest","created_at":"2023-10-03T08:56:37.770Z","updated_at":"2023-10-03T08:56:37.770Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/decrypt_oracle/setup.py","dependencies":[]},{"ecosystem":"pypi","filepath":"setup.py","sha":null,"kind":"manifest","created_at":"2023-10-03T08:56:37.792Z","updated_at":"2023-10-03T08:56:37.792Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/setup.py","dependencies":[]},{"ecosystem":"pypi","filepath":"test_vector_handlers/setup.py","sha":null,"kind":"manifest","created_at":"2023-10-03T08:56:37.804Z","updated_at":"2023-10-03T08:56:37.804Z","repository_link":"https://github.com/aws/aws-encryption-sdk-python/blob/master/test_vector_handlers/setup.py","dependencies":[]}],"score":28.527671835705796,"created_at":"2025-11-11T15:16:48.458Z","updated_at":"2026-08-24T12:32:32.898Z","avatar_url":"https://github.com/aws.png","language":"Python","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/369277","html_url":"https://summary.ecosyste.ms/projects/369277"}