{"id":377570,"url":"https://github.com/spiffe/go-spiffe","last_synced_at":"2026-07-23T12:04:07.350Z","repository":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-07-06T07:23:31.000Z","size":634,"stargazers_count":202,"open_issues_count":21,"forks_count":86,"subscribers_count":18,"default_branch":"main","last_synced_at":"2026-07-17T09:15:22.187Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-07-08T00:45:29.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35801480,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-07-20T02:08:10.276Z","status":"online","status_checked_at":"2026-07-23T02:00:06.683Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"packages":[{"id":14436508,"name":"github.com/spiffe/go-spiffe/v2/logger","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2","versions_count":31,"first_release_published_at":"2026-05-13T07:24:20.667Z","latest_release_published_at":"2026-05-13T07:24:20.667Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-21T16:19:55.353Z","created_at":"2026-05-13T07:23:36.363Z","updated_at":"2026-07-21T16:19:55.353Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/logger","install_command":"go get github.com/spiffe/go-spiffe/v2/logger","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/logger#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.090Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.070147552151246,"dependent_packages_count":4.750509749023225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.9103286505872354},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/logger","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/logger","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/logger","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/logger/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Flogger/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Flogger/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Flogger/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Flogger/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Flogger/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Flogger/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447698,"name":"github.com/spiffe/go-spiffe/v2/internal/cryptoutil","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/internal","versions_count":31,"first_release_published_at":"2026-05-14T17:13:07.741Z","latest_release_published_at":"2026-05-14T17:13:07.741Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:53:10.496Z","created_at":"2026-05-14T17:12:16.699Z","updated_at":"2026-07-19T11:53:10.496Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/cryptoutil","install_command":"go get github.com/spiffe/go-spiffe/v2/internal/cryptoutil","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/cryptoutil#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:29.676Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/internal/cryptoutil","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/cryptoutil","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/cryptoutil","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/internal/cryptoutil/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fcryptoutil/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fcryptoutil/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fcryptoutil/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fcryptoutil/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fcryptoutil/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fcryptoutil/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14436510,"name":"github.com/spiffe/go-spiffe/v2/spiffeid","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2","versions_count":31,"first_release_published_at":"2026-05-13T07:24:22.230Z","latest_release_published_at":"2026-05-13T07:24:22.230Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:53:30.917Z","created_at":"2026-05-13T07:23:38.082Z","updated_at":"2026-07-19T11:53:30.917Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/spiffeid","install_command":"go get github.com/spiffe/go-spiffe/v2/spiffeid","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/spiffeid#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.262Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.070147552151246,"dependent_packages_count":4.750509749023225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.9103286505872354},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/spiffeid","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/spiffeid","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/spiffeid","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/spiffeid/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fspiffeid/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fspiffeid/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fspiffeid/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fspiffeid/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fspiffeid/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fspiffeid/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3498170,"name":"github.com/spiffe/go-spiffe","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe","versions_count":8,"first_release_published_at":"2020-04-23T19:06:34.000Z","latest_release_published_at":"2025-01-31T20:43:36.000Z","latest_release_number":"v2.5.0+incompatible","last_synced_at":"2026-07-21T20:00:53.506Z","created_at":"2022-04-10T19:49:36.428Z","updated_at":"2026-07-21T20:00:53.506Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe","install_command":"go get github.com/spiffe/go-spiffe","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.606Z","dependent_packages_count":59,"downloads":null,"downloads_period":null,"dependent_repos_count":93,"rankings":{"downloads":null,"dependent_repos_count":0.6196063140735149,"dependent_packages_count":0.5668231151005577,"stargazers_count":4.56538376185548,"forks_count":3.171658429445766,"docker_downloads_count":0.5162154707018166,"average":1.887937418235427},"purl":"pkg:golang/github.com/spiffe/go-spiffe","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe","docker_dependents_count":26,"docker_downloads_count":1754318,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14436509,"name":"github.com/spiffe/go-spiffe/v2/bundle/x509bundle","ecosystem":"go","description":"Package x509bundle provides X.509 bundle related functionality.\n\nA bundle represents a collection of X.509 authorities, i.e., those that\nare used to authenticate SPIFFE X509-SVIDs.\n\nYou can create a new bundle for a specific trust domain:\n\nOr you can load it from disk:\n\nThe bundle can be initialized with X.509 authorities:\n\nIn addition, you can add X.509 authorities to the bundle:\n\nBundles can be organized into a set, keyed by trust domain:\n\nA Source is source of X.509 bundles for a trust domain. Both the Bundle\nand Set types implement Source:","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/bundle","versions_count":31,"first_release_published_at":"2026-05-13T07:24:20.607Z","latest_release_published_at":"2026-05-13T07:24:20.607Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:52:58.459Z","created_at":"2026-05-13T07:23:36.704Z","updated_at":"2026-07-19T11:52:58.459Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/bundle/x509bundle","install_command":"go get github.com/spiffe/go-spiffe/v2/bundle/x509bundle","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/bundle/x509bundle#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.258Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.070147552151246,"dependent_packages_count":4.750509749023225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.9103286505872354},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/bundle/x509bundle","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/bundle/x509bundle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/bundle/x509bundle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/bundle/x509bundle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fx509bundle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fx509bundle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fx509bundle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fx509bundle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fx509bundle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fx509bundle/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448025,"name":"github.com/spiffe/go-spiffe/v2/workloadapi","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2","versions_count":31,"first_release_published_at":"2026-05-14T20:12:00.192Z","latest_release_published_at":"2026-05-14T20:12:00.192Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:52:59.079Z","created_at":"2026-05-14T20:11:16.874Z","updated_at":"2026-07-19T11:52:59.080Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/workloadapi","install_command":"go get github.com/spiffe/go-spiffe/v2/workloadapi","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/workloadapi#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.387Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/workloadapi","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/workloadapi","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/workloadapi","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/workloadapi/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fworkloadapi/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fworkloadapi/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fworkloadapi/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fworkloadapi/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fworkloadapi/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fworkloadapi/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":8846702,"name":"github.com/spiffe/go-spiffe/examples/svid-grpc-client","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/examples","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-07-19T11:53:01.287Z","latest_release_number":null,"last_synced_at":"2026-07-19T11:53:01.728Z","created_at":"2024-02-01T04:19:28.606Z","updated_at":"2026-07-19T11:53:01.728Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/examples/svid-grpc-client","install_command":"go get github.com/spiffe/go-spiffe/examples/svid-grpc-client","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/examples/svid-grpc-client#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.385Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.89737210387187,"dependent_packages_count":8.77742918034886,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":9.337400642110365},"purl":"pkg:golang/github.com/spiffe/go-spiffe/examples/svid-grpc-client","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/examples/svid-grpc-client","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/examples/svid-grpc-client","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/examples/svid-grpc-client/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-grpc-client/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-grpc-client/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-grpc-client/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-grpc-client/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-grpc-client/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-grpc-client/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":8793095,"name":"github.com/spiffe/go-spiffe/examples/svid-mTLS","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/examples","versions_count":1,"first_release_published_at":"2020-05-28T14:57:30.000Z","latest_release_published_at":"2020-05-28T14:57:30.000Z","latest_release_number":"v0.0.0-20200528145730-dc11d0c74e85","last_synced_at":"2026-07-19T11:53:07.528Z","created_at":"2024-01-23T04:47:23.501Z","updated_at":"2026-07-19T11:53:07.528Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/examples/svid-mTLS","install_command":"go get github.com/spiffe/go-spiffe/examples/svid-mTLS","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/examples/svid-mTLS#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.427Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":10.225701614206454,"dependent_packages_count":9.068606373096118,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":9.647153993651287},"purl":"pkg:golang/github.com/spiffe/go-spiffe/examples/svid-m%21t%21l%21s","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/examples/svid-mTLS","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/examples/svid-mTLS","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/examples/svid-mTLS/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-mTLS/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-mTLS/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-mTLS/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-mTLS/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-mTLS/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-mTLS/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14436511,"name":"github.com/spiffe/go-spiffe/v2/svid/x509svid","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/svid","versions_count":31,"first_release_published_at":"2026-05-13T07:24:24.770Z","latest_release_published_at":"2026-05-13T07:24:24.770Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:53:15.631Z","created_at":"2026-05-13T07:23:39.190Z","updated_at":"2026-07-19T11:53:15.631Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/svid/x509svid","install_command":"go get github.com/spiffe/go-spiffe/v2/svid/x509svid","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/svid/x509svid#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.094Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.070147552151246,"dependent_packages_count":4.750509749023225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.9103286505872354},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/svid/x509svid","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/svid/x509svid","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/svid/x509svid","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/svid/x509svid/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fx509svid/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fx509svid/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fx509svid/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fx509svid/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fx509svid/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fx509svid/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448273,"name":"github.com/spiffe/go-spiffe/v2/bundle/jwtbundle","ecosystem":"go","description":"Package jwtbundle provides JWT bundle related functionality.\n\nA bundle represents a collection of JWT authorities, i.e., those that\nare used to authenticate SPIFFE JWT-SVIDs.\n\nYou can create a new bundle for a specific trust domain:\n\nOr you can load it from disk:\n\nThe bundle can be initialized with JWT authorities:\n\nIn addition, you can add JWT authorities to the bundle:\n\nBundles can be organized into a set, keyed by trust domain:\n\nA Source is source of JWT bundles for a trust domain. Both the Bundle\nand Set types implement Source:","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/bundle","versions_count":31,"first_release_published_at":"2026-05-14T22:47:12.633Z","latest_release_published_at":"2026-05-14T22:47:12.633Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:53:15.860Z","created_at":"2026-05-14T22:46:23.880Z","updated_at":"2026-07-19T11:53:15.861Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle","install_command":"go get github.com/spiffe/go-spiffe/v2/bundle/jwtbundle","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:29.676Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fjwtbundle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fjwtbundle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fjwtbundle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fjwtbundle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fjwtbundle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fjwtbundle/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14436504,"name":"github.com/spiffe/go-spiffe/v2/bundle/spiffebundle","ecosystem":"go","description":"Package spiffebundle provides SPIFFE bundle related functionality.\n\nA bundle represents a SPIFFE bundle, a collection authorities for\nauthenticating SVIDs.\n\nYou can create a new bundle for a specific trust domain:\n\nOr you can load it from disk:\n\nThe bundle can be initialized with X.509 or JWT authorities:\n\nIn addition, you can add authorities to the bundle:\n\nBundles can be organized into a set, keyed by trust domain:\n\nA Source is source of bundles for a trust domain. Both the\nBundle and Set types implement Source:\n\nAdditionally the Bundle and Set types also implement the x509bundle.Source and jwtbundle.Source interfaces:","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/bundle","versions_count":31,"first_release_published_at":"2026-05-13T07:24:17.585Z","latest_release_published_at":"2026-05-13T07:24:17.585Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:53:27.823Z","created_at":"2026-05-13T07:23:33.966Z","updated_at":"2026-07-19T11:53:27.823Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle","install_command":"go get github.com/spiffe/go-spiffe/v2/bundle/spiffebundle","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.094Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.070147552151246,"dependent_packages_count":4.750509749023225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.9103286505872354},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fspiffebundle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fspiffebundle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fspiffebundle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fspiffebundle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fspiffebundle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fbundle%2Fspiffebundle/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3636183,"name":"github.com/spiffe/go-spiffe/v2","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe","versions_count":34,"first_release_published_at":"2020-04-22T13:52:23.000Z","latest_release_published_at":"2026-06-19T13:39:21.000Z","latest_release_number":"v2.8.1","last_synced_at":"2026-07-22T15:33:09.182Z","created_at":"2022-04-11T08:42:36.463Z","updated_at":"2026-07-22T15:33:09.182Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2","install_command":"go get github.com/spiffe/go-spiffe/v2","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.426Z","dependent_packages_count":360,"downloads":null,"downloads_period":null,"dependent_repos_count":837,"rankings":{"downloads":null,"dependent_repos_count":0.26215309823896993,"dependent_packages_count":0.23332455341680478,"stargazers_count":4.56538376185548,"forks_count":3.171658429445766,"docker_downloads_count":0.41562708046863817,"average":1.7296293846851316},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2","docker_dependents_count":712,"docker_downloads_count":96689332,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447697,"name":"github.com/spiffe/go-spiffe/v2/internal/x509util","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/internal","versions_count":31,"first_release_published_at":"2026-05-14T17:14:00.596Z","latest_release_published_at":"2026-05-14T17:14:00.596Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:53:33.017Z","created_at":"2026-05-14T17:12:14.528Z","updated_at":"2026-07-19T11:53:33.018Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/x509util","install_command":"go get github.com/spiffe/go-spiffe/v2/internal/x509util","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/x509util#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:29.679Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/internal/x509util","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/x509util","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/x509util","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/internal/x509util/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fx509util/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fx509util/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fx509util/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fx509util/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fx509util/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fx509util/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14436506,"name":"github.com/spiffe/go-spiffe/v2/internal/jwtutil","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/internal","versions_count":31,"first_release_published_at":"2026-05-13T07:24:20.561Z","latest_release_published_at":"2026-05-13T07:24:20.561Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:53:59.043Z","created_at":"2026-05-13T07:23:35.183Z","updated_at":"2026-07-19T11:53:59.044Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/jwtutil","install_command":"go get github.com/spiffe/go-spiffe/v2/internal/jwtutil","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/jwtutil#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.091Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.070147552151246,"dependent_packages_count":4.750509749023225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.9103286505872354},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/internal/jwtutil","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/jwtutil","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/jwtutil","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/internal/jwtutil/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fjwtutil/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fjwtutil/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fjwtutil/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fjwtutil/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fjwtutil/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fjwtutil/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":8834725,"name":"github.com/spiffe/go-spiffe/examples/svid-watcher","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/examples","versions_count":1,"first_release_published_at":"2022-02-28T19:50:20.000Z","latest_release_published_at":"2022-02-28T19:50:20.000Z","latest_release_number":"v0.0.0-20220228195020-40dfa55851fc","last_synced_at":"2026-07-19T11:54:08.012Z","created_at":"2024-01-30T02:08:59.908Z","updated_at":"2026-07-19T11:54:08.012Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/examples/svid-watcher","install_command":"go get github.com/spiffe/go-spiffe/examples/svid-watcher","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/examples/svid-watcher#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.389Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.98884845530797,"dependent_packages_count":8.858554471787885,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":9.423701463547928},"purl":"pkg:golang/github.com/spiffe/go-spiffe/examples/svid-watcher","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/examples/svid-watcher","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/examples/svid-watcher","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/examples/svid-watcher/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-watcher/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-watcher/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-watcher/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-watcher/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-watcher/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fexamples%2Fsvid-watcher/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13646713,"name":"golang-github-spiffe-go-spiffe","ecosystem":"debian","description":null,"homepage":"https://github.com/spiffe/go-spiffe","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:38:57.394Z","latest_release_published_at":"2026-02-12T03:38:57.394Z","latest_release_number":"2.5.0-1","last_synced_at":"2026-03-13T20:08:30.363Z","created_at":"2026-02-12T03:38:57.147Z","updated_at":"2026-07-09T05:11:30.331Z","registry_url":"https://tracker.debian.org/pkg/golang-github-spiffe-go-spiffe","install_command":"apt-get install golang-github-spiffe-go-spiffe","documentation_url":"https://packages.debian.org/trixie/golang-github-spiffe-go-spiffe","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-spiffe-go-spiffe-dev","standards_version":"4.7.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-golang, golang-any, golang-github-go-jose-go-jose-dev, golang-github-stretchr-testify-dev, golang-github-zeebo-errs-dev, golang-google-grpc-dev, golang-google-protobuf-dev, protoc-gen-go-1-3, protoc-gen-go-grpc","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.331Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-spiffe-go-spiffe?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-spiffe-go-spiffe","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-spiffe-go-spiffe","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-spiffe-go-spiffe/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-spiffe-go-spiffe/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-spiffe-go-spiffe/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-spiffe-go-spiffe/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-spiffe-go-spiffe/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-spiffe-go-spiffe/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-spiffe-go-spiffe/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1987,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":316},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-06-10T05:17:04.542Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":14230782,"name":"go-github-com-spiffe-go-spiffe-v2","ecosystem":"guix","description":"SPIFFE Workload API client library for Go","homepage":"https://github.com/spiffe/go-spiffe","licenses":"expat","normalized_licenses":["Other"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-04-11T08:25:26.452Z","latest_release_published_at":"2026-04-11T08:25:26.452Z","latest_release_number":"2.6.0","last_synced_at":"2026-04-11T08:25:26.601Z","created_at":"2026-04-11T08:25:26.340Z","updated_at":"2026-07-09T05:11:30.300Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-spiffe-go-spiffe-v2/2.6.0/","install_command":"guix install go-github-com-spiffe-go-spiffe-v2","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n16481","metadata":{"location":"gnu/packages/golang-web.scm:16481","variable_name":"go-github-com-spiffe-go-spiffe-v2"},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.300Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-spiffe-go-spiffe-v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-spiffe-go-spiffe-v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-spiffe-go-spiffe-v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-spiffe-go-spiffe-v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-spiffe-go-spiffe-v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-spiffe-go-spiffe-v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-spiffe-go-spiffe-v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-spiffe-go-spiffe-v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-spiffe-go-spiffe-v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-spiffe-go-spiffe-v2/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32125,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":368},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-06-10T05:17:25.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":14448023,"name":"github.com/spiffe/go-spiffe/v2/svid/jwtsvid","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/svid","versions_count":31,"first_release_published_at":"2026-05-14T20:11:59.375Z","latest_release_published_at":"2026-05-14T20:11:59.375Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:54:22.857Z","created_at":"2026-05-14T20:11:16.560Z","updated_at":"2026-07-19T11:54:22.857Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/svid/jwtsvid","install_command":"go get github.com/spiffe/go-spiffe/v2/svid/jwtsvid","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/svid/jwtsvid#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.483Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":4.280064152814959,"forks_count":3.1199471594709776,"docker_downloads_count":null,"average":4.303811560378324},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/svid/jwtsvid","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/svid/jwtsvid","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/svid/jwtsvid","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/svid/jwtsvid/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fjwtsvid/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fjwtsvid/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fjwtsvid/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fjwtsvid/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fjwtsvid/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fsvid%2Fjwtsvid/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448021,"name":"github.com/spiffe/go-spiffe/v2/proto/spiffe/workload","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/proto/spiffe","versions_count":31,"first_release_published_at":"2026-05-14T20:11:59.076Z","latest_release_published_at":"2026-05-14T20:11:59.076Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:54:31.309Z","created_at":"2026-05-14T20:11:16.049Z","updated_at":"2026-07-19T11:54:31.309Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/proto/spiffe/workload","install_command":"go get github.com/spiffe/go-spiffe/v2/proto/spiffe/workload","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/proto/spiffe/workload#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.426Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/proto/spiffe/workload","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/proto/spiffe/workload","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/proto/spiffe/workload","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/proto/spiffe/workload/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fproto%2Fspiffe%2Fworkload/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fproto%2Fspiffe%2Fworkload/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fproto%2Fspiffe%2Fworkload/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fproto%2Fspiffe%2Fworkload/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fproto%2Fspiffe%2Fworkload/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Fproto%2Fspiffe%2Fworkload/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448272,"name":"github.com/spiffe/go-spiffe/v2/internal/pemutil","ecosystem":"go","description":"","homepage":"https://github.com/spiffe/go-spiffe","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":[],"namespace":"github.com/spiffe/go-spiffe/v2/internal","versions_count":31,"first_release_published_at":"2026-05-14T22:47:08.495Z","latest_release_published_at":"2026-05-14T22:47:08.495Z","latest_release_number":"v2.6.0","last_synced_at":"2026-07-19T11:54:31.312Z","created_at":"2026-05-14T22:46:23.095Z","updated_at":"2026-07-19T11:54:31.312Z","registry_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/pemutil","install_command":"go get github.com/spiffe/go-spiffe/v2/internal/pemutil","documentation_url":"https://pkg.go.dev/github.com/spiffe/go-spiffe/v2/internal/pemutil#section-documentation","metadata":{},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"spiffe","name":"SPIFFE","uuid":"19497462","kind":"organization","description":"Secure Production Identity Framework For Everyone","email":"hello@spiffe.io","website":"https://spiffe.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19497462?v=4","repositories_count":14,"last_synced_at":"2023-02-27T00:48:26.397Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/spiffe","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T09:36:25.041Z","updated_at":"2023-02-27T00:48:26.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe/repositories"},"tags":[{"name":"v2.7.0","sha":"76b14bd4140aac9bef74b27a77c81333c47feee1","kind":"tag","published_at":"2026-06-03T20:13:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.7.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6d0af3a4780fcc69132bb8bc5d2bdfcbe5ea42b","kind":"commit","published_at":"2025-08-21T14:57:50.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.6.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"dd15542826b6e12943e74670a8807a74b4da09d9","kind":"commit","published_at":"2025-01-31T20:43:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.5.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"84d40aa39340cc4287e6e7a4e540502dd6103e5c","kind":"commit","published_at":"2024-10-05T17:06:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.4.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"94335b268274926928c08fc5ce21f12a4e1ea044","kind":"commit","published_at":"2024-06-17T15:40:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.3.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.3.0/manifests"},{"name":"v2.2.0","sha":"31d98359ff12d176a82255f1b9b208d76f3fa63d","kind":"commit","published_at":"2024-04-01T22:53:46.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.2.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.2.0/manifests"},{"name":"v2.1.7","sha":"16eb51c892ada33ff04487ca6142fc0f232cede5","kind":"commit","published_at":"2024-01-17T20:08:14.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"da08c0dac1529de2ad698c092773d435c4602a97","kind":"commit","published_at":"2023-06-06T17:02:06.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"f6a32814675d0b38d11fcd84c0c72e8662293c07","kind":"commit","published_at":"2023-05-26T21:15:54.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"f5ed4dd4ee0ee4a26b450c8ca19a73b0c7b2dcf0","kind":"commit","published_at":"2023-03-31T11:04:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"acf23ce460e7cc1f9bee385d8f867249aaf5b63f","kind":"commit","published_at":"2023-03-16T16:23:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"8d5b208885da678116238bc44567257cc038bb3b","kind":"commit","published_at":"2023-01-09T19:32:36.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"1e584b8ba5f7b2d2e0f616a3ef5e24a1de674877","kind":"commit","published_at":"2022-06-29T15:46:15.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"31de176038793c17cf7e77f23e61401160c7d6c9","kind":"commit","published_at":"2022-04-29T20:41:57.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"fbdcc18c7fc2fdc2ae45ec09ca80866e51da6cf2","kind":"commit","published_at":"2022-03-10T22:29:10.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.12","sha":"40dfa55851fc03eff579775b9acfdece8823c27c","kind":"commit","published_at":"2022-02-28T19:50:20.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.12","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.12/manifests"},{"name":"v2.0.0-beta.11","sha":"73bc82510a9c9e471a75e4acdeaa8878e1b16bb5","kind":"commit","published_at":"2022-01-14T22:08:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.11","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.11/manifests"},{"name":"v2.0.0-beta.10","sha":"7b2184ee742dec93be292cdf8cc06ac6fbffcdbd","kind":"commit","published_at":"2021-10-13T16:39:58.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.10","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.10/manifests"},{"name":"v2.0.0-beta.9","sha":"2c0214c138cb6a2928400390b2da00c15b7c13cd","kind":"commit","published_at":"2021-10-13T15:35:42.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.9","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.9/manifests"},{"name":"v2.0.0-beta.8","sha":"a0ad0e11f352faf5a0aaabc5021d85c457f8ca96","kind":"commit","published_at":"2021-07-28T19:50:30.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.8","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.8/manifests"},{"name":"v2.0.0-beta.7","sha":"a8630567713cc9a2c5ed78de19cdba11a211a8b6","kind":"commit","published_at":"2021-06-28T21:35:31.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.7","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.7/manifests"},{"name":"v2.0.0-beta.6","sha":"155b16bf96db95715ce95b2d99484fa69d02e86c","kind":"commit","published_at":"2021-05-25T19:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"e1b8af857d8faa88eb1060c2c52861916b152b76","kind":"commit","published_at":"2021-02-10T21:15:04.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"8e1adeaada756b9b0b201dab3745aebc7180347c","kind":"commit","published_at":"2020-12-01T16:22:18.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"fa0eb80fdef103cc7b1b9c7a42fb1318a2087ec0","kind":"commit","published_at":"2020-11-09T22:37:07.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"00bd38faf6114fab87ca1a55d6bc837451755a6a","kind":"commit","published_at":"2020-10-06T19:43:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"94501d58fa20bda319b9f1271c6ceeebde15509c","kind":"commit","published_at":"2020-08-27T16:58:53.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.0","sha":"dfb504dc33f8277d6cdaad482e31df643d12b6a8","kind":"commit","published_at":"2020-08-03T21:22:39.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.1.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.1.0/manifests"},{"name":"v2.0.0-alpha.5","sha":"181b65666d8cfc1dbe4b235980e6f6189145e0ca","kind":"commit","published_at":"2020-07-09T00:06:56.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"7affb5567e0238682eb5a6dd6c6bafcc11064413","kind":"commit","published_at":"2020-05-22T21:12:00.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"033c689a19315cd28fa655d55df2e2ac90610c6a","kind":"commit","published_at":"2020-05-06T13:53:59.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.2/manifests"},{"name":"v1.0.0","sha":"30d87b85e1967b43604c2f832928f5638413bb6b","kind":"commit","published_at":"2020-04-23T19:06:34.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v1.0.0","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v1.0.0/manifests"},{"name":"v2.0.0-alpha.1","sha":"88a939843ab7ba5541cbd58c3c0e295981fd229b","kind":"commit","published_at":"2020-04-22T13:52:23.000Z","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/spiffe/go-spiffe/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/spiffe/go-spiffe@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags/v2.0.0-alpha.1/manifests"}]},"repo_metadata_updated_at":"2026-07-09T05:11:30.388Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/spiffe/go-spiffe/v2/internal/pemutil","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/pemutil","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/spiffe/go-spiffe/v2/internal/pemutil","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/spiffe/go-spiffe/v2/internal/pemutil/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fpemutil/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fpemutil/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fpemutil/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fpemutil/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fpemutil/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fspiffe%2Fgo-spiffe%2Fv2%2Finternal%2Fpemutil/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2226026,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13449124,"name":"golang-github-spiffe-go-spiffe","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/spiffe/go-spiffe","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/spiffe/go-spiffe","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T16:27:39.791Z","latest_release_published_at":"2026-02-08T16:27:39.791Z","latest_release_number":"2.1.7-2","last_synced_at":"2026-03-08T16:48:32.247Z","created_at":"2026-02-08T16:27:16.595Z","updated_at":"2026-07-09T05:11:30.389Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-spiffe-go-spiffe","install_command":"apt-get install golang-github-spiffe-go-spiffe","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-spiffe-go-spiffe-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-go-jose-go-jose.v3-dev (\u003e= 3.0.3-4), golang-github-stretchr-testify-dev, golang-github-zeebo-errs-dev, golang-google-grpc-dev, golang-google-protobuf-dev, protoc-gen-go-1-3, protoc-gen-go-grpc","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23486709,"uuid":"90563651","full_name":"spiffe/go-spiffe","owner":"spiffe","description":"Golang library for SPIFFE support","archived":false,"fork":false,"pushed_at":"2026-06-16T11:53:14.000Z","size":622,"stargazers_count":200,"open_issues_count":18,"forks_count":85,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-16T13:26:37.142Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/spiffe.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-07T21:42:11.000Z","updated_at":"2026-06-16T11:57:34.000Z","dependencies_parsed_at":"2023-02-17T06:31:13.399Z","dependency_job_id":"125c0ead-a3aa-4cf8-b0fa-58d1935467b8","html_url":"https://github.com/spiffe/go-spiffe","commit_stats":{"total_commits":209,"total_committers":46,"mean_commits":4.543478260869565,"dds":0.8516746411483254,"last_synced_commit":"87cfecf6c092ad3c94862bf21c34bf72074d118a"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/spiffe/go-spiffe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/spiffe","download_url":"https://codeload.github.com/spiffe/go-spiffe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/sbom","scorecard":{"id":841449,"data":{"date":"2025-08-11","repo":{"name":"github.com/spiffe/go-spiffe","commit":"84a48c0bf4d245dedbfa97f156043a15e5139799"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Maintained","score":2,"reason":"2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 12/16 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/dco.yaml:9","Warn: no topLevel permission defined: .github/workflows/dco.yaml:1","Warn: no topLevel permission defined: .github/workflows/pr_build.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_build.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/spiffe/go-spiffe/pr_build.yaml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T20:34:36.781Z","repository_id":23486709,"created_at":"2025-08-23T20:34:36.782Z","updated_at":"2025-08-23T20:34:36.782Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35287396,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-07-09T05:11:30.389Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-spiffe-go-spiffe?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-spiffe-go-spiffe","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-spiffe-go-spiffe","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-spiffe-go-spiffe/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-31T11:02:16.780Z","issues_count":49,"pull_requests_count":257,"avg_time_to_close_issue":37312125.8,"avg_time_to_close_pull_request":2197076.744394619,"issues_closed_count":40,"pull_requests_closed_count":223,"pull_request_authors_count":39,"issue_authors_count":30,"avg_comments_per_issue":2.2448979591836733,"avg_comments_per_pull_request":0.7237354085603113,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":121,"past_year_issues_count":1,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":6315432.0,"past_year_avg_time_to_close_pull_request":1231254.125,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":0.42857142857142855,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","maintainers":[{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"},{"login":"amartinezfayo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"},{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"},{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"},{"login":"maxlambrecht","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"},{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"},{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}],"active_maintainers":[{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"},{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"},{"login":"maxlambrecht","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-spiffe-go-spiffe/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-spiffe-go-spiffe/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-spiffe-go-spiffe/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-spiffe-go-spiffe/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-spiffe-go-spiffe/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-spiffe-go-spiffe/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1473,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":214},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-06-10T05:17:05.787Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}}],"commits":{"id":4923820,"full_name":"spiffe/go-spiffe","default_branch":"main","total_commits":255,"total_committers":43,"total_bot_commits":43,"total_bot_committers":1,"mean_commits":5.930232558139535,"dds":0.6823529411764706,"past_year_total_commits":25,"past_year_total_committers":7,"past_year_total_bot_commits":13,"past_year_total_bot_committers":1,"past_year_mean_commits":3.5714285714285716,"past_year_dds":0.48,"last_synced_at":"2026-07-21T11:45:13.730Z","last_synced_commit":"e9973f6314a3fa0e36eb1f00fbfe37bdc1554b96","created_at":"2024-11-10T10:24:38.148Z","updated_at":"2026-07-21T11:42:03.941Z","committers":[{"name":"Andrew Harding","email":"azdagron@gmail.com","login":"azdagron","count":81},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":43},{"name":"Agustín Martínez Fayó","email":"amartinezfayo@gmail.com","login":"amartinezfayo","count":23},{"name":"martincapello","email":"m.a.capello@gmail.com","login":"martincapello","count":15},{"name":"Marcos Yacob","email":"marcos@scytale.io","login":"MarcosDY","count":14},{"name":"Marcos Yedro","email":"marcosyedro@gmail.com","login":"marcosy","count":13},{"name":"Evan Gilman","email":"evan@scytale.io","login":"evan2645","count":8},{"name":"Mariano Kunzi","email":"kunzi.mariano@gmail.com","login":"kunzimariano","count":5},{"name":"Josh Kline","email":"jkline@uber.com","login":"jkanywhere","count":4},{"name":"Sorin Dumitru","email":"210746+sorindumitru","login":"sorindumitru","count":3},{"name":"Ryan Turner","email":"rturner3","login":"rturner3","count":3},{"name":"Guilherme Carvalho","email":"guilhermbrsp@gmail.com","login":"guilhermocc","count":3},{"name":"arukiidou","email":"arukiidou@yahoo.co.jp","login":"arukiidou","count":3},{"name":"kfox1111","email":"Kevin.Fox@pnnl.gov","login":"kfox1111","count":2},{"name":"Sword","email":"sword@cybozu.co.jp","login":"sword-jin","count":2},{"name":"Max Lambrecht","email":"maxlambrecht@gmail.com","login":"maxlambrecht","count":2},{"name":"Andrew J","email":"ajessup@gmail.com","login":"ajessup","count":2},{"name":"Andres Gomez Coronel","email":"andres@scytale.io","login":null,"count":2},{"name":"walmav","email":"madhu@scytale.io","login":null,"count":2},{"name":"David Langhorst","email":"dave@scytale.io","login":null,"count":2},{"name":"sanderson042","email":"steve.anderson@hpe.com","login":"sanderson042","count":1},{"name":"angabini","email":"494150+angabini","login":"angabini","count":1},{"name":"Parth Patel","email":"88045217+pxp928","login":"pxp928","count":1},{"name":"Aidan Obley","email":"aobley@vmware.com","login":null,"count":1},{"name":"Emiliano Berenbaum","email":"emiliano@scytale.io","login":null,"count":1},{"name":"Joe Williams","email":"joe.williams@github.com","login":null,"count":1},{"name":"Peyton Walters","email":"pwalters18@bloomberg.net","login":null,"count":1},{"name":"Noah Stride","email":"noah@noahstride.co.uk","login":"strideynet","count":1},{"name":"Nick Stott","email":"nick@nickstott.com","login":"nstott","count":1},{"name":"Matthieu MOREL","email":"matthieu.morel35@gmail.com","login":"mmorel-35","count":1},{"name":"Matheus Pimenta","email":"matheuscscp@gmail.com","login":"matheuscscp","count":1},{"name":"Mat Byczkowski","email":"mbyczkowski@squareup.com","login":"mbyczkowski","count":1},{"name":"Marc Yang","email":"68757320+yangmarcyang","login":"yangmarcyang","count":1},{"name":"M1a0","email":"liyuhan.loveyana@bytedance.com","login":"loveyana","count":1},{"name":"Lorenz Brun","email":"lorenz@brun.one","login":"lorenz","count":1},{"name":"Lillie Rugtveit","email":"126776478+LillieEntur","login":"LillieEntur","count":1},{"name":"Kyle Anderson","email":"kylea@netflix.com","login":"solarkennedy","count":1},{"name":"Frank","email":"frankli0324@hotmail.com","login":"frankli0324","count":1},{"name":"Emmanuel Odeke","email":"emmanuel@orijtech.com","login":"odeke-em","count":1},{"name":"Cedric Staub","email":"cs@squareup.com","login":"csstaub","count":1},{"name":"Bryon Nevis","email":"bryon.nevis@intel.com","login":"bnevis-i","count":1},{"name":"Ben Burry","email":"ben@burry.name","login":"benburry","count":1},{"name":"Arndt Schwenkschuster","email":"17650715+arndt-s","login":"arndt-s","count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":13},{"name":"Andrew Harding","email":"azdagron@gmail.com","login":"azdagron","count":4},{"name":"Agustín Martínez Fayó","email":"amartinezfayo@gmail.com","login":"amartinezfayo","count":4},{"name":"Max Lambrecht","email":"maxlambrecht@gmail.com","login":"maxlambrecht","count":1},{"name":"Matheus Pimenta","email":"matheuscscp@gmail.com","login":"matheuscscp","count":1},{"name":"Marcos Yacob","email":"marcosyacob@gmail.com","login":"MarcosDY","count":1},{"name":"Arndt Schwenkschuster","email":"17650715+arndt-s","login":"arndt-s","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-07-23T00:00:22.250Z","repositories_count":6396772,"commits_count":871250797,"contributors_count":36103162,"owners_count":1231343,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"spiffe/go-spiffe","html_url":"https://github.com/spiffe/go-spiffe","last_synced_at":"2026-07-21T11:03:26.876Z","status":"active","issues_count":50,"pull_requests_count":274,"avg_time_to_close_issue":36402083.82926829,"avg_time_to_close_pull_request":2308962.4663865548,"issues_closed_count":41,"pull_requests_closed_count":238,"pull_request_authors_count":42,"issue_authors_count":31,"avg_comments_per_issue":2.2,"avg_comments_per_pull_request":0.7299270072992701,"merged_pull_requests_count":159,"bot_issues_count":0,"bot_pull_requests_count":127,"past_year_issues_count":1,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":405.0,"past_year_avg_time_to_close_pull_request":3018912.434782609,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":11,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6216216216216216,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":16,"created_at":"2023-05-16T04:10:29.641Z","updated_at":"2026-07-21T11:03:26.876Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/spiffe%2Fgo-spiffe/issues","issue_labels_count":{"table":{"help wanted":1}},"pull_request_labels_count":{"table":{"dependencies":127,"go":119,"github_actions":7}},"issue_author_associations_count":{"table":{"NONE":25,"MEMBER":15,"CONTRIBUTOR":8,"COLLABORATOR":2}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":162,"MEMBER":82,"NONE":21,"COLLABORATOR":9}},"issue_authors":{"table":{"azdagron":10,"esweiss":4,"evan2645":3,"amoore877":2,"drewwells":2,"strideynet":2,"rturner3":2,"kfox1111":2,"Falco20019":1,"yangmarcyang":1,"Dentrax":1,"guilhermocc":1,"mweissbacher":1,"frankli0324":1,"mmorel-35":1,"zmt":1,"penghuazhou":1,"pranay-k12":1,"faisal-memon":1,"suyuee":1,"jas4711":1,"anuraaga":1,"glaucimar":1,"srago":1,"jpeach":1,"edwarnicke":1,"chiragk25":1,"nstott":1,"joewilliams":1,"prasanthAllu":1,"pxp928":1}},"pull_request_authors":{"table":{"dependabot[bot]":127,"azdagron":65,"amartinezfayo":10,"rturner3":7,"arukiidou":7,"maxlambrecht":4,"sorindumitru":4,"jsnctl":3,"sword-jin":3,"kfox1111":3,"guilhermocc":3,"lorenz":2,"LillieEntur":2,"angabini":2,"hlandau":2,"dfeldman":2,"MarcosDY":2,"nstott":2,"mcpherrinm":1,"arndt-s":1,"sanderson042":1,"joewilliams":1,"adobley":1,"mmorel-35":1,"langbeck":1,"solarkennedy":1,"keeganwitt":1,"bleggett":1,"benburry":1,"matheuscscp":1,"frankli0324":1,"strideynet":1,"martincapello":1,"pxp928":1,"knabben":1,"bnevis-i":1,"loveyana":1,"yangmarcyang":1,"ValFadeev":1,"suyuee":1,"amitlicht":1,"arpitjain099":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-07-23T00:00:22.028Z","repositories_count":14857928,"issues_count":31971038,"pull_requests_count":105207167,"authors_count":11356455,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":21,"go":16,"github_actions":5}},"past_year_issue_author_associations_count":{"table":{"NONE":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":22,"MEMBER":10,"NONE":4,"COLLABORATOR":1}},"past_year_issue_authors":{"table":{"suyuee":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":21,"amartinezfayo":4,"maxlambrecht":3,"azdagron":2,"arndt-s":1,"arpitjain099":1,"jsnctl":1,"MarcosDY":1,"matheuscscp":1,"suyuee":1,"ValFadeev":1}},"maintainers":[{"table":{"login":"azdagron","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"}},{"table":{"login":"amartinezfayo","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"}},{"table":{"login":"rturner3","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rturner3"}},{"table":{"login":"maxlambrecht","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}},{"table":{"login":"evan2645","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evan2645"}},{"table":{"login":"MarcosDY","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"}},{"table":{"login":"dfeldman","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfeldman"}},{"table":{"login":"amoore877","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amoore877"}},{"table":{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}}],"active_maintainers":[{"table":{"login":"amartinezfayo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amartinezfayo"}},{"table":{"login":"maxlambrecht","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maxlambrecht"}},{"table":{"login":"azdagron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/azdagron"}},{"table":{"login":"arndt-s","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arndt-s"}},{"table":{"login":"MarcosDY","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MarcosDY"}}]}},"events":{"total":{"ReleaseEvent":2,"DeleteEvent":52,"PullRequestEvent":86,"ForkEvent":6,"IssuesEvent":14,"WatchEvent":22,"IssueCommentEvent":44,"PushEvent":64,"PullRequestReviewCommentEvent":11,"PullRequestReviewEvent":36,"CreateEvent":56},"last_year":{"ReleaseEvent":1,"DeleteEvent":18,"PullRequestEvent":27,"ForkEvent":2,"IssuesEvent":2,"WatchEvent":11,"IssueCommentEvent":4,"PushEvent":21,"PullRequestReviewCommentEvent":6,"PullRequestReviewEvent":13,"CreateEvent":23}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"v2/go.mod","sha":null,"kind":"manifest","created_at":"2022-07-12T16:07:36.239Z","updated_at":"2022-07-12T16:07:36.239Z","repository_link":"https://github.com/spiffe/go-spiffe/blob/main/v2/go.mod","dependencies":[{"id":162634041,"package_name":"github.com/Microsoft/go-winio","ecosystem":"go","requirements":"v0.5.2","direct":true,"kind":"runtime","optional":false},{"id":162634042,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":true,"kind":"runtime","optional":false},{"id":162634043,"package_name":"github.com/zeebo/errs","ecosystem":"go","requirements":"v1.2.2","direct":true,"kind":"runtime","optional":false},{"id":162634044,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.46.0","direct":true,"kind":"runtime","optional":false},{"id":162634045,"package_name":"google.golang.org/grpc/examples","ecosystem":"go","requirements":"v0.0.0-20201130180447-c456688b1860","direct":true,"kind":"runtime","optional":false},{"id":162634046,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.28.0","direct":true,"kind":"runtime","optional":false},{"id":162634047,"package_name":"gopkg.in/square/go-jose.v2","ecosystem":"go","requirements":"v2.4.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"v2/go.sum","sha":null,"kind":"lockfile","created_at":"2022-07-12T16:07:36.331Z","updated_at":"2022-07-12T16:07:36.331Z","repository_link":"https://github.com/spiffe/go-spiffe/blob/main/v2/go.sum","dependencies":[{"id":162634088,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.26.0","direct":false,"kind":"runtime","optional":false},{"id":162634089,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.34.0","direct":false,"kind":"runtime","optional":false},{"id":162634090,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":162634091,"package_name":"github.com/Microsoft/go-winio","ecosystem":"go","requirements":"v0.5.2","direct":false,"kind":"runtime","optional":false},{"id":162634092,"package_name":"github.com/antihax/optional","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":162634093,"package_name":"github.com/census-instrumentation/opencensus-proto","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":162634094,"package_name":"github.com/cespare/xxhash/v2","ecosystem":"go","requirements":"v2.1.1","direct":false,"kind":"runtime","optional":false},{"id":162634095,"package_name":"github.com/client9/misspell","ecosystem":"go","requirements":"v0.3.4","direct":false,"kind":"runtime","optional":false},{"id":162634096,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20191209042840-269d4d468f6f","direct":false,"kind":"runtime","optional":false},{"id":162634097,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20201120205902-5459f2c99403","direct":false,"kind":"runtime","optional":false},{"id":162634098,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20210930031921-04548b0d99d4","direct":false,"kind":"runtime","optional":false},{"id":162634099,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20210922020428-25de7278fc84","direct":false,"kind":"runtime","optional":false},{"id":162634100,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20211001041855-01bcc9b48dfe","direct":false,"kind":"runtime","optional":false},{"id":162634101,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20211011173535-cb28da3451f1","direct":false,"kind":"runtime","optional":false},{"id":162634102,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":162634103,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":162634104,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":162634105,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.1-0.20191026205805-5f8ba28d4473","direct":false,"kind":"runtime","optional":false},{"id":162634106,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.4","direct":false,"kind":"runtime","optional":false},{"id":162634107,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20201210154907-fd9021fe5dad","direct":false,"kind":"runtime","optional":false},{"id":162634108,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.10.2-0.20220325020618-49ff273808a1","direct":false,"kind":"runtime","optional":false},{"id":162634109,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":162634110,"package_name":"github.com/ghodss/yaml","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":162634111,"package_name":"github.com/golang/glog","ecosystem":"go","requirements":"v0.0.0-20160126235308-23def4e6c14b","direct":false,"kind":"runtime","optional":false},{"id":162634112,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":162634113,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":162634114,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":162634115,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.3","direct":false,"kind":"runtime","optional":false},{"id":162634116,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":162634117,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1.0.20200221234624-67d41d38c208","direct":false,"kind":"runtime","optional":false},{"id":162634118,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.2","direct":false,"kind":"runtime","optional":false},{"id":162634119,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.4.0.20200313231945-b860323f09d0","direct":false,"kind":"runtime","optional":false},{"id":162634120,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":162634121,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":162634122,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.2","direct":false,"kind":"runtime","optional":false},{"id":162634123,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.3","direct":false,"kind":"runtime","optional":false},{"id":162634124,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":162634125,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.2","direct":false,"kind":"runtime","optional":false},{"id":162634126,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":162634127,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":162634128,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":162634129,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":162634130,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":162634131,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":162634132,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.6","direct":false,"kind":"runtime","optional":false},{"id":162634133,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.1.2","direct":false,"kind":"runtime","optional":false},{"id":162634134,"package_name":"github.com/grpc-ecosystem/grpc-gateway","ecosystem":"go","requirements":"v1.16.0","direct":false,"kind":"runtime","optional":false},{"id":162634135,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":162634136,"package_name":"github.com/prometheus/client_model","ecosystem":"go","requirements":"v0.0.0-20190812154241-14fe0d1b01d4","direct":false,"kind":"runtime","optional":false},{"id":162634137,"package_name":"github.com/rogpeppe/fastuuid","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":162634138,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":162634139,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":162634140,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":162634141,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":162634142,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":162634143,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":false,"kind":"runtime","optional":false},{"id":162634144,"package_name":"github.com/zeebo/errs","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":162634145,"package_name":"go.opentelemetry.io/proto/otlp","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":162634146,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190308221718-c2843e01d9a2","direct":false,"kind":"runtime","optional":false},{"id":162634147,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20200622213623-75b288015ac9","direct":false,"kind":"runtime","optional":false},{"id":162634148,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20190121172915-509febef88a4","direct":false,"kind":"runtime","optional":false},{"id":162634149,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20181026193005-c67002cb31c3","direct":false,"kind":"runtime","optional":false},{"id":162634150,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190227174305-5b3e6a55c961","direct":false,"kind":"runtime","optional":false},{"id":162634151,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190313153728-d0100b6bd8b3","direct":false,"kind":"runtime","optional":false},{"id":162634152,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180724234803-3673e40ba225","direct":false,"kind":"runtime","optional":false},{"id":162634153,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180826012351-8a410e7b638d","direct":false,"kind":"runtime","optional":false},{"id":162634154,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190108225652-1e06a53dbb7e","direct":false,"kind":"runtime","optional":false},{"id":162634155,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190213061140-3a22650c66bd","direct":false,"kind":"runtime","optional":false},{"id":162634156,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190311183353-d8887717615a","direct":false,"kind":"runtime","optional":false},{"id":162634157,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190404232315-eb5bcb51f2a3","direct":false,"kind":"runtime","optional":false},{"id":162634158,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200822124328-c89045814202","direct":false,"kind":"runtime","optional":false},{"id":162634159,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201021035429-f5854403a974","direct":false,"kind":"runtime","optional":false},{"id":162634160,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20180821212333-d2e6202438be","direct":false,"kind":"runtime","optional":false},{"id":162634161,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20200107190931-bf48bf16ab8d","direct":false,"kind":"runtime","optional":false},{"id":162634162,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20180314180146-1d60e4601c6f","direct":false,"kind":"runtime","optional":false},{"id":162634163,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181108010431-42b317875d0f","direct":false,"kind":"runtime","optional":false},{"id":162634164,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181221193216-37e7f081c4d4","direct":false,"kind":"runtime","optional":false},{"id":162634165,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190423024810-112230192c58","direct":false,"kind":"runtime","optional":false},{"id":162634166,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20180830151530-49385e6e1522","direct":false,"kind":"runtime","optional":false},{"id":162634167,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190215142949-d0b11bdaac8a","direct":false,"kind":"runtime","optional":false},{"id":162634168,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190412213103-97732733099d","direct":false,"kind":"runtime","optional":false},{"id":162634169,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191026070338-33540a1f6037","direct":false,"kind":"runtime","optional":false},{"id":162634170,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200323222414-85ca7c5b95cd","direct":false,"kind":"runtime","optional":false},{"id":162634171,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200930185726-fdedc70b468f","direct":false,"kind":"runtime","optional":false},{"id":162634172,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210119212857-b64e53b001e4","direct":false,"kind":"runtime","optional":false},{"id":162634173,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210124154548-22da62e12c0c","direct":false,"kind":"runtime","optional":false},{"id":162634174,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":162634175,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.3","direct":false,"kind":"runtime","optional":false},{"id":162634176,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20180917221912-90fa682c2a6e","direct":false,"kind":"runtime","optional":false},{"id":162634177,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190114222345-bf090417da8b","direct":false,"kind":"runtime","optional":false},{"id":162634178,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190226205152-f727befe758c","direct":false,"kind":"runtime","optional":false},{"id":162634179,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190311212946-11955173bddd","direct":false,"kind":"runtime","optional":false},{"id":162634180,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190524140312-2c0ae7006135","direct":false,"kind":"runtime","optional":false},{"id":162634181,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":162634182,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20200804184101-5ec99f83aff1","direct":false,"kind":"runtime","optional":false},{"id":162634183,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":162634184,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":162634185,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20180817151627-c66870c02cf8","direct":false,"kind":"runtime","optional":false},{"id":162634186,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190819201941-24fa4b261c55","direct":false,"kind":"runtime","optional":false},{"id":162634187,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200513103714-09dca8ec2884","direct":false,"kind":"runtime","optional":false},{"id":162634188,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200526211855-cb27e3aa2013","direct":false,"kind":"runtime","optional":false},{"id":162634189,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200806141610-86f49bd18e98","direct":false,"kind":"runtime","optional":false},{"id":162634190,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.19.0","direct":false,"kind":"runtime","optional":false},{"id":162634191,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":162634192,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.25.1","direct":false,"kind":"runtime","optional":false},{"id":162634193,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.27.0","direct":false,"kind":"runtime","optional":false},{"id":162634194,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.31.0","direct":false,"kind":"runtime","optional":false},{"id":162634195,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.33.1","direct":false,"kind":"runtime","optional":false},{"id":162634196,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.33.2","direct":false,"kind":"runtime","optional":false},{"id":162634197,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.36.0","direct":false,"kind":"runtime","optional":false},{"id":162634198,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.46.0","direct":false,"kind":"runtime","optional":false},{"id":162634199,"package_name":"google.golang.org/grpc/examples","ecosystem":"go","requirements":"v0.0.0-20201130180447-c456688b1860","direct":false,"kind":"runtime","optional":false},{"id":162634200,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200109180630-ec00e32a8dfd","direct":false,"kind":"runtime","optional":false},{"id":162634201,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200221191635-4d8936d0db64","direct":false,"kind":"runtime","optional":false},{"id":162634202,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200228230310-ab0ca4ff8a60","direct":false,"kind":"runtime","optional":false},{"id":162634203,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.20.1-0.20200309200217-e05f789c0967","direct":false,"kind":"runtime","optional":false},{"id":162634204,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.21.0","direct":false,"kind":"runtime","optional":false},{"id":162634205,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.22.0","direct":false,"kind":"runtime","optional":false},{"id":162634206,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":162634207,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.1-0.20200526195155-81db48ad09cc","direct":false,"kind":"runtime","optional":false},{"id":162634208,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.24.0","direct":false,"kind":"runtime","optional":false},{"id":162634209,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.25.0","direct":false,"kind":"runtime","optional":false},{"id":162634210,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":162634211,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":162634212,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.27.1","direct":false,"kind":"runtime","optional":false},{"id":162634213,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.28.0","direct":false,"kind":"runtime","optional":false},{"id":162634214,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":162634215,"package_name":"gopkg.in/square/go-jose.v2","ecosystem":"go","requirements":"v2.4.1","direct":false,"kind":"runtime","optional":false},{"id":162634216,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.2","direct":false,"kind":"runtime","optional":false},{"id":162634217,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.3","direct":false,"kind":"runtime","optional":false},{"id":162634218,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false},{"id":162634219,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190102054323-c2f93a96b099","direct":false,"kind":"runtime","optional":false},{"id":162634220,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190523083050-ea95bdfd59fc","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pr_build.yaml","sha":null,"kind":"manifest","created_at":"2023-01-13T23:22:39.152Z","updated_at":"2023-01-13T23:22:39.152Z","repository_link":"https://github.com/spiffe/go-spiffe/blob/main/.github/workflows/pr_build.yaml","dependencies":[{"id":6891698606,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6891698607,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6891698608,"package_name":"msys2/setup-msys2","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]}],"score":27.573387948097462,"created_at":"2026-07-08T04:52:59.623Z","updated_at":"2026-07-23T12:04:07.365Z","avatar_url":"https://github.com/spiffe.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/377570","html_url":"https://summary.ecosyste.ms/projects/377570"}