{"id":377609,"url":"https://github.com/google/go-containerregistry","last_synced_at":"2026-07-23T12:05:47.499Z","repository":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-07-10T17:45:21.000Z","size":31519,"stargazers_count":3976,"open_issues_count":179,"forks_count":660,"subscribers_count":34,"default_branch":"main","last_synced_at":"2026-07-15T08:06:33.548Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-07-14T20:58:53.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35575443,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-17T02:00:06.162Z","response_time":116,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2855,"last_synced_at":"2026-07-05T03:20:07.091Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":2116738,"followers":75015,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2026-07-05T03:20:07.091Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"packages":[{"id":14447473,"name":"github.com/google/go-containerregistry/internal/verify","ecosystem":"go","description":"Package verify provides a ReadCloser that verifies content matches the\nexpected hash values.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/internal","versions_count":39,"first_release_published_at":"2026-05-14T15:57:39.078Z","latest_release_published_at":"2026-05-21T11:34:33.388Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:19.804Z","created_at":"2026-05-14T15:55:59.162Z","updated_at":"2026-07-12T17:29:19.805Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/verify","install_command":"go get github.com/google/go-containerregistry/internal/verify","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/verify#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:51.253Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/internal/verify","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/verify","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/verify","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/internal/verify/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fverify/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fverify/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fverify/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fverify/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fverify/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fverify/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447446,"name":"github.com/google/go-containerregistry/pkg/v1/tarball","ecosystem":"go","description":"Package tarball provides facilities for reading/writing v1.Images from/to\na tarball on-disk.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-14T15:55:47.716Z","latest_release_published_at":"2026-05-21T11:34:34.233Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:14.430Z","created_at":"2026-05-14T15:54:40.586Z","updated_at":"2026-07-12T17:29:14.431Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/tarball","install_command":"go get github.com/google/go-containerregistry/pkg/v1/tarball","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/tarball#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:54:40.789Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/tarball","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/tarball","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/tarball","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/tarball/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftarball/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftarball/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftarball/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftarball/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftarball/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftarball/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447444,"name":"github.com/google/go-containerregistry/internal/gzip","ecosystem":"go","description":"Package gzip provides helper functions for interacting with gzipped streams.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/internal","versions_count":39,"first_release_published_at":"2026-05-14T15:55:32.554Z","latest_release_published_at":"2026-05-21T11:34:34.232Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.270Z","created_at":"2026-05-14T15:54:38.424Z","updated_at":"2026-07-12T17:29:20.271Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/gzip","install_command":"go get github.com/google/go-containerregistry/internal/gzip","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/gzip#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:54:39.428Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/internal/gzip","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/gzip","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/gzip","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/internal/gzip/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fgzip/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fgzip/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fgzip/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fgzip/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fgzip/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fgzip/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447490,"name":"github.com/google/go-containerregistry/pkg/v1/daemon","ecosystem":"go","description":"Package daemon provides facilities for reading/writing v1.Image from/to\na running daemon.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-18T19:24:17.254Z","latest_release_published_at":"2026-05-21T11:34:29.996Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:15.922Z","created_at":"2026-05-14T15:55:59.578Z","updated_at":"2026-07-12T17:29:15.922Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/daemon","install_command":"go get github.com/google/go-containerregistry/pkg/v1/daemon","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/daemon#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:13.627Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/daemon","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/daemon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/daemon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/daemon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fdaemon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fdaemon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fdaemon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fdaemon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fdaemon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fdaemon/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":12725241,"name":"crane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T00:48:40.577Z","latest_release_published_at":"2026-01-26T00:48:40.577Z","latest_release_number":"0.15.2","last_synced_at":"2026-03-26T20:14:19.604Z","created_at":"2026-01-26T00:48:40.426Z","updated_at":"2026-03-26T20:14:19.801Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=crane","install_command":"nix-env -iA nixpkgs.crane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/tools/go-containerregistry/default.nix#L38","metadata":{"nix_attribute":"go-containerregistry-0.15.2","position":"pkgs/development/tools/go-containerregistry/default.nix:38","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:59.833Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/crane?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/crane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-02-26T14:15:02.888Z","updated_at":"2026-02-26T14:15:02.888Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":183},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-06-10T05:16:22.193Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":12740363,"name":"gcrane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T03:16:06.284Z","latest_release_published_at":"2026-01-26T03:16:06.284Z","latest_release_number":"0.15.2","last_synced_at":"2026-03-26T21:15:03.562Z","created_at":"2026-01-26T03:16:06.115Z","updated_at":"2026-03-26T21:15:03.831Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=gcrane","install_command":"nix-env -iA nixpkgs.gcrane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/tools/go-containerregistry/default.nix#L38","metadata":{"nix_attribute":"go-containerregistry-0.15.2","position":"pkgs/development/tools/go-containerregistry/default.nix:38","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30233429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-07T22:02:39.930Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/gcrane?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/gcrane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/gcrane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/gcrane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-07T22:02:26.299Z","issues_count":247,"pull_requests_count":523,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7168860.921465969,"issues_closed_count":180,"pull_requests_closed_count":382,"pull_request_authors_count":133,"issue_authors_count":213,"avg_comments_per_issue":2.3360323886639676,"avg_comments_per_pull_request":1.8049713193116634,"merged_pull_requests_count":134,"bot_issues_count":1,"bot_pull_requests_count":171,"past_year_issues_count":24,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":939244.6285714286,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":31,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.6039603960396039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":22,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/gcrane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/gcrane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/gcrane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/gcrane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/gcrane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/gcrane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-02-26T20:07:31.976Z","updated_at":"2026-02-26T20:07:31.976Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":183},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-06-10T05:16:22.193Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":12743126,"name":"go-containerregistry","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T03:40:08.008Z","latest_release_published_at":"2026-01-26T03:40:08.008Z","latest_release_number":"0.15.2","last_synced_at":"2026-03-26T22:14:56.871Z","created_at":"2026-01-26T03:40:07.824Z","updated_at":"2026-03-26T22:14:57.163Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=go-containerregistry","install_command":"nix-env -iA nixpkgs.go-containerregistry","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/tools/go-containerregistry/default.nix#L38","metadata":{"nix_attribute":"go-containerregistry-0.15.2","position":"pkgs/development/tools/go-containerregistry/default.nix:38","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30233429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-07T22:02:39.888Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/go-containerregistry?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-07T22:02:26.299Z","issues_count":247,"pull_requests_count":523,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7168860.921465969,"issues_closed_count":180,"pull_requests_closed_count":382,"pull_request_authors_count":133,"issue_authors_count":213,"avg_comments_per_issue":2.3360323886639676,"avg_comments_per_pull_request":1.8049713193116634,"merged_pull_requests_count":134,"bot_issues_count":1,"bot_pull_requests_count":171,"past_year_issues_count":24,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":939244.6285714286,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":31,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.6039603960396039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":22,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/go-containerregistry/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-02-26T21:11:31.243Z","updated_at":"2026-02-26T21:11:31.243Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":183},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-06-10T05:16:22.193Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":12757308,"name":"go-containerregistry","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2026-01-26T06:09:59.906Z","latest_release_published_at":"2026-03-03T16:11:52.812Z","latest_release_number":"0.21.1","last_synced_at":"2026-05-14T13:49:58.306Z","created_at":"2026-01-26T06:09:59.708Z","updated_at":"2026-05-14T13:49:58.306Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=go-containerregistry","install_command":"nix-env -iA nixpkgs.go-containerregistry","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/by-name/go/go-containerregistry/package.nix#L69","metadata":{"nix_attribute":"go-containerregistry-0.21.1","position":"pkgs/by-name/go/go-containerregistry/package.nix:69","platforms":["x86_64-darwin","aarch64-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.2","sha":"9e0ccb0a7240fe7cc820f0fc78e2e2b1ef8b7e71","kind":"commit","published_at":"2026-03-02T22:05:02.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2/manifests"},{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-03-17T02:03:17.069Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":0.5705573109985788,"forks_count":0.6471375546755342,"docker_downloads_count":null,"average":0.3044237164185283},"purl":"pkg:nix/go-containerregistry?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/go-containerregistry/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":147,"html_url":null,"role":null,"created_at":"2026-03-03T16:11:54.955Z","updated_at":"2026-03-03T16:11:54.955Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/yurrriq/packages"},{"uuid":"ryan4yin","login":null,"name":"Ryan Yin","email":"xiaoyin_c@qq.com","url":"https://github.com/ryan4yin","packages_count":79,"html_url":null,"role":null,"created_at":"2026-03-03T16:11:55.047Z","updated_at":"2026-03-03T16:11:55.047Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/ryan4yin/packages"}],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":150413,"maintainers_count":4791,"namespaces_count":0,"keywords_count":3210,"github":"NixOS","metadata":{"funded_packages_count":1663},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-07-09T05:02:48.469Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":14662358,"name":"github.com/google/go-containerRegistry","ecosystem":"go","description":null,"homepage":null,"licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/google/go-containerRegistry","keywords_array":[],"namespace":null,"versions_count":50,"first_release_published_at":"2020-06-03T20:01:40.000Z","latest_release_published_at":"2026-06-17T22:00:28.000Z","latest_release_number":"v0.21.7","last_synced_at":"2026-07-12T17:29:24.596Z","created_at":"2026-06-21T14:44:51.696Z","updated_at":"2026-07-12T17:29:24.597Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerRegistry","install_command":"go get github.com/google/go-containerRegistry","documentation_url":"https://pkg.go.dev/github.com/google/go-containerRegistry#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-06-21T16:09:33.954Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.961521983674049,"dependent_packages_count":4.6491615939223285,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.805341788798189},"purl":"pkg:golang/github.com/google/go-container%21registry","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerRegistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerRegistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerRegistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerRegistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerRegistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerRegistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerRegistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerRegistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerRegistry/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447471,"name":"github.com/google/go-containerregistry/internal/retry","ecosystem":"go","description":"Package retry provides methods for retrying operations. It is a thin wrapper\naround k8s.io/apimachinery/pkg/util/wait to make certain operations easier.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/internal","versions_count":39,"first_release_published_at":"2026-05-14T15:57:30.224Z","latest_release_published_at":"2026-05-21T11:34:31.268Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.495Z","created_at":"2026-05-14T15:55:59.135Z","updated_at":"2026-07-12T17:29:20.496Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/retry","install_command":"go get github.com/google/go-containerregistry/internal/retry","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/retry#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:33.355Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/internal/retry","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/retry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/retry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/internal/retry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3492522,"name":"github.com/google/go-containerregistry","ecosystem":"go","description":"","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google","versions_count":50,"first_release_published_at":"2020-06-03T20:01:40.000Z","latest_release_published_at":"2026-06-17T22:00:28.000Z","latest_release_number":"v0.21.7","last_synced_at":"2026-07-13T23:05:49.377Z","created_at":"2022-04-10T19:10:02.568Z","updated_at":"2026-07-13T23:05:49.378Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry","install_command":"go get github.com/google/go-containerregistry","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry#section-documentation","metadata":{},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30233429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-03-07T22:02:41.318Z","dependent_packages_count":3580,"downloads":null,"downloads_period":null,"dependent_repos_count":11790,"rankings":{"downloads":null,"dependent_repos_count":0.06991592635522424,"dependent_packages_count":0.07474125460587848,"stargazers_count":1.378709214426294,"forks_count":1.3928771995026832,"docker_downloads_count":0.11139321599914583,"average":0.6055273621778452},"purl":"pkg:golang/github.com/google/go-containerregistry","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry","docker_dependents_count":3891,"docker_downloads_count":4564433695,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-07T22:02:26.299Z","issues_count":247,"pull_requests_count":523,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7168860.921465969,"issues_closed_count":180,"pull_requests_closed_count":382,"pull_request_authors_count":133,"issue_authors_count":213,"avg_comments_per_issue":2.3360323886639676,"avg_comments_per_pull_request":1.8049713193116634,"merged_pull_requests_count":134,"bot_issues_count":1,"bot_pull_requests_count":171,"past_year_issues_count":24,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":939244.6285714286,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":31,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.6039603960396039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":22,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11753570,"name":"crane","ecosystem":"alpine","description":"tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/crane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":6,"first_release_published_at":"2025-05-23T21:57:51.000Z","latest_release_published_at":"2026-01-15T20:35:20.000Z","latest_release_number":"0.20.5-r5","last_synced_at":"2026-03-18T05:08:20.544Z","created_at":"2025-06-07T13:19:30.119Z","updated_at":"2026-03-18T05:08:20.545Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/crane","install_command":"apk add crane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:03:18.061Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/crane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/crane/codemeta","maintainers":[{"uuid":"kdaudt@alpinelinux.org","login":null,"name":"Kevin Daudt","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","packages_count":239,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","role":null,"created_at":"2025-06-08T05:58:18.576Z","updated_at":"2025-06-08T05:58:18.576Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/kdaudt@alpinelinux.org/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4641,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1728},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-06-10T05:18:29.151Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":14447488,"name":"github.com/google/go-containerregistry/pkg/logs","ecosystem":"go","description":"Package logs exposes the loggers used by this library.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg","versions_count":49,"first_release_published_at":"2026-05-18T19:24:15.654Z","latest_release_published_at":"2026-05-21T11:34:29.977Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:19.455Z","created_at":"2026-05-14T15:55:59.502Z","updated_at":"2026-07-12T17:29:19.456Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/logs","install_command":"go get github.com/google/go-containerregistry/pkg/logs","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/logs#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:57:09.029Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/logs","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/logs","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/logs","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/logs/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Flogs/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Flogs/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Flogs/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Flogs/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Flogs/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Flogs/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13154046,"name":"go-containerregistry","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T21:56:29.259Z","latest_release_published_at":"2026-02-01T21:56:29.259Z","latest_release_number":"0.19.1","last_synced_at":"2026-05-13T08:00:29.565Z","created_at":"2026-02-01T21:56:10.076Z","updated_at":"2026-05-13T08:00:29.565Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=go-containerregistry","install_command":"nix-env -iA nixpkgs.go-containerregistry","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/tools/go-containerregistry/default.nix#L56","metadata":{"nix_attribute":"go-containerregistry-0.19.1","position":"pkgs/development/tools/go-containerregistry/default.nix:56","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30233429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-07T22:02:38.069Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/go-containerregistry?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-07T22:02:26.299Z","issues_count":247,"pull_requests_count":523,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7168860.921465969,"issues_closed_count":180,"pull_requests_closed_count":382,"pull_request_authors_count":133,"issue_authors_count":213,"avg_comments_per_issue":2.3360323886639676,"avg_comments_per_pull_request":1.8049713193116634,"merged_pull_requests_count":134,"bot_issues_count":1,"bot_pull_requests_count":171,"past_year_issues_count":24,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":939244.6285714286,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":31,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.6039603960396039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":22,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/go-containerregistry/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-03-05T23:22:25.559Z","updated_at":"2026-03-05T23:22:25.559Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":283},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-07-09T05:03:36.756Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":11127347,"name":"crane","ecosystem":"alpine","description":"tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/crane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":6,"first_release_published_at":"2024-10-17T20:26:15.000Z","latest_release_published_at":"2025-05-08T20:02:17.000Z","latest_release_number":"0.20.2-r5","last_synced_at":"2026-03-18T07:03:32.167Z","created_at":"2024-12-07T07:37:39.264Z","updated_at":"2026-03-18T07:03:32.169Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/crane","install_command":"apk add crane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:39.988Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/crane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/crane/codemeta","maintainers":[{"uuid":"kdaudt@alpinelinux.org","login":null,"name":"Kevin Daudt","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","packages_count":219,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","role":null,"created_at":"2024-12-09T17:30:12.753Z","updated_at":"2024-12-09T17:30:12.753Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/kdaudt@alpinelinux.org/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3612,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1270},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-06-10T05:18:33.774Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":14447495,"name":"github.com/google/go-containerregistry/pkg/v1/remote","ecosystem":"go","description":"Package remote provides facilities for reading/writing v1.Images from/to\na remote image registry.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-14T15:57:21.201Z","latest_release_published_at":"2026-05-21T11:34:31.662Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:19.470Z","created_at":"2026-05-14T15:56:00.041Z","updated_at":"2026-07-12T17:29:19.471Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/remote","install_command":"go get github.com/google/go-containerregistry/pkg/v1/remote","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/remote#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:14.593Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/remote","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/remote","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/remote","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/remote/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447470,"name":"github.com/google/go-containerregistry/internal/estargz","ecosystem":"go","description":"Package estargz adapts the containerd estargz package to our abstractions.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/internal","versions_count":38,"first_release_published_at":"2026-05-14T15:57:17.319Z","latest_release_published_at":"2026-05-14T15:57:17.319Z","latest_release_number":"v0.21.5","last_synced_at":"2026-07-12T17:29:15.932Z","created_at":"2026-05-14T15:55:59.105Z","updated_at":"2026-07-12T17:29:15.933Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/estargz","install_command":"go get github.com/google/go-containerregistry/internal/estargz","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/estargz#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:27.138Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/internal/estargz","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/estargz","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/estargz","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/internal/estargz/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Festargz/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Festargz/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Festargz/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Festargz/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Festargz/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Festargz/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447478,"name":"github.com/google/go-containerregistry/pkg/v1","ecosystem":"go","description":"Package v1 defines structured types for OCI v1 images","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg","versions_count":49,"first_release_published_at":"2026-05-14T15:56:58.158Z","latest_release_published_at":"2026-05-21T11:34:29.209Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.005Z","created_at":"2026-05-14T15:55:59.257Z","updated_at":"2026-07-12T17:29:20.006Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1","install_command":"go get github.com/google/go-containerregistry/pkg/v1","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:57.013Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1","docker_dependents_count":1,"docker_downloads_count":9,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447496,"name":"github.com/google/go-containerregistry/pkg/v1/match","ecosystem":"go","description":"Package match provides functionality for conveniently matching a v1.Descriptor.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":44,"first_release_published_at":"2026-05-14T15:57:26.402Z","latest_release_published_at":"2026-05-21T11:34:34.362Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:19.444Z","created_at":"2026-05-14T15:56:00.168Z","updated_at":"2026-07-12T17:29:19.445Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/match","install_command":"go get github.com/google/go-containerregistry/pkg/v1/match","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/match#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:25.316Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/match","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/match","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/match","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/match/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmatch/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmatch/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmatch/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmatch/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmatch/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmatch/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447468,"name":"github.com/google/go-containerregistry/internal/and","ecosystem":"go","description":"Package and provides helpers for adding Close to io.{Reader|Writer}.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/internal","versions_count":39,"first_release_published_at":"2026-05-14T15:57:07.034Z","latest_release_published_at":"2026-05-21T11:34:34.603Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:19.956Z","created_at":"2026-05-14T15:55:58.654Z","updated_at":"2026-07-12T17:29:19.957Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/and","install_command":"go get github.com/google/go-containerregistry/internal/and","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/and#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:13.628Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/internal/and","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/and","docker_dependents_count":1,"docker_downloads_count":9,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/and","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/internal/and/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fand/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fand/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fand/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fand/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fand/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fand/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447474,"name":"github.com/google/go-containerregistry/pkg/authn","ecosystem":"go","description":"Package authn defines different methods of authentication for\ntalking to a container registry.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg","versions_count":49,"first_release_published_at":"2026-05-14T15:57:58.416Z","latest_release_published_at":"2026-05-21T11:34:34.613Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:17.517Z","created_at":"2026-05-14T15:55:59.192Z","updated_at":"2026-07-12T17:29:17.518Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/authn","install_command":"go get github.com/google/go-containerregistry/pkg/authn","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/authn#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:43.474Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/authn","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/authn","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/authn","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/authn/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447487,"name":"github.com/google/go-containerregistry/pkg/v1/empty","ecosystem":"go","description":"Package empty provides an implementation of v1.Image equivalent to \"FROM scratch\".","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-14T15:58:12.756Z","latest_release_published_at":"2026-05-21T11:34:29.805Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.010Z","created_at":"2026-05-14T15:55:59.466Z","updated_at":"2026-07-12T17:29:20.012Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/empty","install_command":"go get github.com/google/go-containerregistry/pkg/v1/empty","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/empty#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:57:09.791Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/empty","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/empty","docker_dependents_count":1,"docker_downloads_count":9,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/empty","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/empty/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fempty/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fempty/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fempty/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fempty/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fempty/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fempty/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447481,"name":"github.com/google/go-containerregistry/pkg/v1/partial","ecosystem":"go","description":"Package partial defines methods for building up a v1.Image from\nminimal subsets that are sufficient for defining a v1.Image.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-14T15:57:41.407Z","latest_release_published_at":"2026-05-21T11:34:30.033Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:18.499Z","created_at":"2026-05-14T15:55:59.407Z","updated_at":"2026-07-12T17:29:18.500Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/partial","install_command":"go get github.com/google/go-containerregistry/pkg/v1/partial","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/partial#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:32.026Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/partial","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/partial","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/partial","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/partial/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fpartial/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fpartial/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fpartial/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fpartial/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fpartial/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fpartial/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14431015,"name":"github.com/google/go-containerregistry/pkg/name","ecosystem":"go","description":"Package name defines structured types for representing image references.\n\nWhat's in a name? For image references, not nearly enough!\n\nImage references look a lot like URLs, but they differ in that they don't\ncontain the scheme (http or https), they can end with a :tag or a @digest\n(the latter being validated), and they perform defaulting for missing\ncomponents.\n\nSince image references don't contain the scheme, we do our best to infer\nif we use http or https from the given hostname. We allow http fallback for\nany host that looks like localhost (localhost, 127.0.0.1, ::1), ends in\n\".local\", or is in the \"private\" address space per RFC 1918. For everything\nelse, we assume https only. To override this heuristic, use the Insecure\noption.\n\nImage references with a digest signal to us that we should verify the content\nof the image matches the digest. E.g. when pulling a Digest reference, we'll\ncalculate the sha256 of the manifest returned by the registry and error out\nif it doesn't match what we asked for.\n\nFor defaulting, we interpret \"ubuntu\" as\n\"index.docker.io/library/ubuntu:latest\" because we add the missing repo\n\"library\", the missing registry \"index.docker.io\", and the missing tag\n\"latest\". To disable this defaulting, use the StrictValidation option. This\nis useful e.g. to only allow image references that explicitly set a tag or\ndigest, so that you don't accidentally pull \"latest\".","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg","versions_count":49,"first_release_published_at":"2026-05-12T05:40:24.063Z","latest_release_published_at":"2026-05-21T11:34:34.931Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:18.527Z","created_at":"2026-05-12T05:39:09.036Z","updated_at":"2026-07-12T17:29:18.528Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/name","install_command":"go get github.com/google/go-containerregistry/pkg/name","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/name#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-12T05:39:09.830Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.075376507577022,"dependent_packages_count":4.7556286312616125,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.915502569419317},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/name","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fname/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fname/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fname/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fname/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fname/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fname/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4204753,"name":"github.com/google/go-containerregistry/cmd/krane","ecosystem":"go","description":"","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/cmd","versions_count":107,"first_release_published_at":"2022-07-20T23:26:27.000Z","latest_release_published_at":"2026-05-20T01:38:16.000Z","latest_release_number":"v0.0.0-20260520013816-d807d512681c","last_synced_at":"2026-07-12T17:29:26.259Z","created_at":"2022-04-12T20:51:05.544Z","updated_at":"2026-07-12T17:29:26.260Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/cmd/krane","install_command":"go get github.com/google/go-containerregistry/cmd/krane","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/cmd/krane#section-documentation","metadata":{},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-05-21T19:31:50.000Z","size":31300,"stargazers_count":3880,"open_issues_count":158,"forks_count":644,"subscribers_count":34,"default_branch":"main","last_synced_at":"2026-05-22T04:10:29.929Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-05-21T19:32:08.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":49,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33423109,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-23T22:14:44.296Z","status":"online","status_checked_at":"2026-05-24T02:00:06.296Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2823,"last_synced_at":"2026-05-16T16:05:42.907Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":2113149,"followers":72588,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2026-05-16T16:05:42.908Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-06-26T15:17:26.348Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.297010515822919,"dependent_packages_count":8.17154093257566,"stargazers_count":1.3374036923971508,"forks_count":1.366259084256651,"docker_downloads_count":0.689578285006017,"average":4.172358502011679},"purl":"pkg:golang/github.com/google/go-containerregistry/cmd/krane","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/cmd/krane","docker_dependents_count":0,"docker_downloads_count":0,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/cmd/krane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/cmd/krane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fcmd%2Fkrane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fcmd%2Fkrane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fcmd%2Fkrane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fcmd%2Fkrane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fcmd%2Fkrane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fcmd%2Fkrane/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448155,"name":"github.com/google/go-containerregistry/pkg/v1/types","ecosystem":"go","description":"Package types holds common OCI media types.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-14T21:42:01.994Z","latest_release_published_at":"2026-05-21T11:34:33.432Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.012Z","created_at":"2026-05-14T21:40:47.857Z","updated_at":"2026-07-12T17:29:20.013Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/types","install_command":"go get github.com/google/go-containerregistry/pkg/v1/types","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/types#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T21:40:48.686Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/types","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/types","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/types","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/types/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftypes/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftypes/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftypes/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftypes/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftypes/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Ftypes/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4207710,"name":"github.com/google/go-containerregistry/pkg/authn/kubernetes","ecosystem":"go","description":"","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/authn","versions_count":180,"first_release_published_at":"2022-03-01T18:26:34.000Z","latest_release_published_at":"2026-06-24T17:22:45.000Z","latest_release_number":"v0.0.0-20260624172245-e8b2b9e51df6","last_synced_at":"2026-07-15T07:51:29.309Z","created_at":"2022-04-12T21:02:14.827Z","updated_at":"2026-07-15T07:51:29.310Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/authn/kubernetes","install_command":"go get github.com/google/go-containerregistry/pkg/authn/kubernetes","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/authn/kubernetes#section-documentation","metadata":{},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30233429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-03-07T22:02:41.244Z","dependent_packages_count":181,"downloads":null,"downloads_period":null,"dependent_repos_count":551,"rankings":{"downloads":null,"dependent_repos_count":0.30676767687138035,"dependent_packages_count":0.4070324855288185,"stargazers_count":1.341749253357453,"forks_count":1.3781958816336715,"docker_downloads_count":0.6400233258420968,"average":0.8147537246466839},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/authn/kubernetes","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/authn/kubernetes","docker_dependents_count":178,"docker_downloads_count":1005235,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/authn/kubernetes","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/authn/kubernetes/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-07T22:02:26.299Z","issues_count":247,"pull_requests_count":523,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7168860.921465969,"issues_closed_count":180,"pull_requests_closed_count":382,"pull_request_authors_count":133,"issue_authors_count":213,"avg_comments_per_issue":2.3360323886639676,"avg_comments_per_pull_request":1.8049713193116634,"merged_pull_requests_count":134,"bot_issues_count":1,"bot_pull_requests_count":171,"past_year_issues_count":24,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":939244.6285714286,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":31,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.6039603960396039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":22,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fkubernetes/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fkubernetes/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fkubernetes/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fkubernetes/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fkubernetes/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fkubernetes/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13963741,"name":"go-github-com-google-go-containerregistry","ecosystem":"guix","description":"Go library and tools for working with container registries","homepage":"https://github.com/google/go-containerregistry","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:57:33.655Z","latest_release_published_at":"2026-03-02T22:57:33.655Z","latest_release_number":"0.20.2","last_synced_at":"2026-04-07T01:02:01.974Z","created_at":"2026-03-02T22:57:33.475Z","updated_at":"2026-04-07T01:02:01.974Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-google-go-containerregistry/0.20.2/","install_command":"guix install go-github-com-google-go-containerregistry","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n6462","metadata":{"location":"gnu/packages/golang-web.scm:6462","variable_name":"go-github-com-google-go-containerregistry"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:59.494Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-google-go-containerregistry","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-google-go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-google-go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-google-go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-google-go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-google-go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-google-go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-google-go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-google-go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-google-go-containerregistry/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32076,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":368},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-06-10T05:17:25.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":6071092,"name":"crane","ecosystem":"alpine","description":"tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/crane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":39,"first_release_published_at":"2023-01-27T06:25:59.000Z","latest_release_published_at":"2026-06-06T18:58:17.000Z","latest_release_number":"0.21.6-r0","last_synced_at":"2026-06-07T20:03:20.767Z","created_at":"2023-01-31T19:31:57.739Z","updated_at":"2026-06-07T20:03:20.769Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/crane","install_command":"apk add crane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.2","sha":"9e0ccb0a7240fe7cc820f0fc78e2e2b1ef8b7e71","kind":"commit","published_at":"2026-03-02T22:05:02.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2/manifests"},{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-03-17T02:03:17.067Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.64073262366938,"stargazers_count":5.122886662492173,"forks_count":4.888071383844709,"average":6.162922667501566},"purl":"pkg:apk/alpine/crane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/crane/codemeta","maintainers":[{"uuid":"kdaudt@alpinelinux.org","login":null,"name":"Kevin Daudt","email":"kdaudt@alpinelinux.org","url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","packages_count":258,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","role":null,"created_at":"2023-02-01T02:55:26.094Z","updated_at":"2023-02-01T02:55:26.094Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/kdaudt@alpinelinux.org/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39755,"maintainers_count":899,"namespaces_count":3,"keywords_count":6579,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2727},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-06-10T05:16:50.784Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":13031463,"name":"gcrane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T15:08:22.746Z","latest_release_published_at":"2026-02-01T15:08:22.746Z","latest_release_number":"0.20.2","last_synced_at":"2026-04-15T01:05:54.360Z","created_at":"2026-02-01T15:08:22.514Z","updated_at":"2026-04-15T01:31:18.072Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=gcrane","install_command":"nix-env -iA nixpkgs.gcrane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/by-name/go/go-containerregistry/package.nix#L68","metadata":{"nix_attribute":"go-containerregistry-0.20.2","position":"pkgs/by-name/go/go-containerregistry/package.nix:68","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:39.981Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":0.2623316363755605,"forks_count":0.23199954091963634,"docker_downloads_count":null,"average":0.1235827943237992},"purl":"pkg:nix/gcrane?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/gcrane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/gcrane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/gcrane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/gcrane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/gcrane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/gcrane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/gcrane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/gcrane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/gcrane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-03-04T10:22:32.784Z","updated_at":"2026-03-04T10:22:32.784Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":283},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-06-10T05:16:24.031Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":12731852,"name":"crane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2026-01-26T01:54:02.833Z","latest_release_published_at":"2026-03-26T03:04:17.214Z","latest_release_number":"0.21.3","last_synced_at":"2026-03-26T03:04:18.229Z","created_at":"2026-01-26T01:54:02.641Z","updated_at":"2026-03-26T03:04:42.601Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=crane","install_command":"nix-env -iA nixpkgs.crane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/by-name/go/go-containerregistry/package.nix#L69","metadata":{"nix_attribute":"go-containerregistry-0.21.3","position":"pkgs/by-name/go/go-containerregistry/package.nix:69","platforms":["x86_64-darwin","aarch64-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-25T02:33:56.000Z","size":31204,"stargazers_count":3785,"open_issues_count":170,"forks_count":629,"subscribers_count":34,"default_branch":"main","last_synced_at":"2026-03-25T18:04:35.963Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-25T01:17:55.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":46,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30948189,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-26T02:38:33.265Z","status":"ssl_error","status_checked_at":"2026-03-26T02:36:10.435Z","response_time":114,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.3","sha":"3888fb8f87385a95591ba2fa08acc97a72058f2e","kind":"commit","published_at":"2026-03-17T23:22:01.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.3/manifests"},{"name":"v0.21.2","sha":"9e0ccb0a7240fe7cc820f0fc78e2e2b1ef8b7e71","kind":"commit","published_at":"2026-03-02T22:05:02.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2/manifests"},{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-03-26T03:04:42.600Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/crane?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-25T05:00:28.527Z","issues_count":248,"pull_requests_count":530,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7064378.597938145,"issues_closed_count":180,"pull_requests_closed_count":388,"pull_request_authors_count":137,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8132075471698113,"merged_pull_requests_count":138,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":99,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":882487.3421052631,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":38,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7373737373737373,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":26,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/crane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":147,"html_url":null,"role":null,"created_at":"2026-02-26T02:18:57.581Z","updated_at":"2026-02-26T02:18:57.581Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/yurrriq/packages"},{"uuid":"ryan4yin","login":null,"name":"Ryan Yin","email":"xiaoyin_c@qq.com","url":"https://github.com/ryan4yin","packages_count":79,"html_url":null,"role":null,"created_at":"2026-02-26T02:18:57.642Z","updated_at":"2026-02-26T02:18:57.642Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/ryan4yin/packages"}],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":150413,"maintainers_count":4791,"namespaces_count":0,"keywords_count":3210,"github":"NixOS","metadata":{"funded_packages_count":1663},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-07-09T05:02:48.469Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":8666530,"name":"crane","ecosystem":"alpine","description":"tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/crane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":4,"first_release_published_at":"2023-10-12T01:45:39.000Z","latest_release_published_at":"2024-05-12T07:25:43.000Z","latest_release_number":"0.16.1-r4","last_synced_at":"2026-03-18T19:04:32.015Z","created_at":"2023-12-20T10:06:13.641Z","updated_at":"2026-03-18T19:04:32.015Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/crane","install_command":"apk add crane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:27.069Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/crane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/crane/codemeta","maintainers":[{"uuid":"kdaudt@alpinelinux.org","login":null,"name":"Kevin Daudt","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","packages_count":222,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","role":null,"created_at":"2023-12-20T12:10:52.768Z","updated_at":"2023-12-20T12:10:52.768Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers/kdaudt@alpinelinux.org/packages"}],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3179,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":824},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-06-10T05:19:05.125Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":13143348,"name":"crane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T21:25:25.467Z","latest_release_published_at":"2026-02-01T21:25:25.467Z","latest_release_number":"0.19.1","last_synced_at":"2026-03-05T12:22:26.948Z","created_at":"2026-02-01T21:25:15.095Z","updated_at":"2026-03-17T02:02:27.502Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=crane","install_command":"nix-env -iA nixpkgs.crane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/tools/go-containerregistry/default.nix#L56","metadata":{"nix_attribute":"go-containerregistry-0.19.1","position":"pkgs/development/tools/go-containerregistry/default.nix:56","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:27.502Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{},"purl":"pkg:nix/crane?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/crane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-03-05T12:22:27.128Z","updated_at":"2026-03-05T12:22:27.128Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":283},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-07-09T05:03:36.756Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":13021943,"name":"crane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T14:29:01.694Z","latest_release_published_at":"2026-02-01T14:29:01.694Z","latest_release_number":"0.20.2","last_synced_at":"2026-03-07T12:22:36.015Z","created_at":"2026-02-01T14:28:57.895Z","updated_at":"2026-03-17T02:02:39.984Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=crane","install_command":"nix-env -iA nixpkgs.crane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/by-name/go/go-containerregistry/package.nix#L68","metadata":{"nix_attribute":"go-containerregistry-0.20.2","position":"pkgs/by-name/go/go-containerregistry/package.nix:68","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:39.984Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/crane?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/crane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-03-07T12:22:36.179Z","updated_at":"2026-03-07T12:22:36.179Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":283},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-06-10T05:16:24.031Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":13152526,"name":"gcrane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T21:52:06.896Z","latest_release_published_at":"2026-02-01T21:52:06.896Z","latest_release_number":"0.19.1","last_synced_at":"2026-03-05T20:23:10.443Z","created_at":"2026-02-01T21:52:06.657Z","updated_at":"2026-03-17T02:02:59.493Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=gcrane","install_command":"nix-env -iA nixpkgs.gcrane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/tools/go-containerregistry/default.nix#L56","metadata":{"nix_attribute":"go-containerregistry-0.19.1","position":"pkgs/development/tools/go-containerregistry/default.nix:56","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:59.493Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/gcrane?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/gcrane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/gcrane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/gcrane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/gcrane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/gcrane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/gcrane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/gcrane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/gcrane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/gcrane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-03-05T20:23:10.703Z","updated_at":"2026-03-05T20:23:10.703Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":283},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-07-09T05:03:36.756Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":13245122,"name":"crane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T03:27:07.771Z","latest_release_published_at":"2026-02-02T03:27:07.771Z","latest_release_number":"0.16.1","last_synced_at":"2026-03-06T00:00:21.093Z","created_at":"2026-02-02T03:27:06.703Z","updated_at":"2026-03-17T02:03:04.582Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=crane","install_command":"nix-env -iA nixpkgs.crane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/tools/go-containerregistry/default.nix#L38","metadata":{"nix_attribute":"go-containerregistry-0.16.1","position":"pkgs/development/tools/go-containerregistry/default.nix:38","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:03:04.582Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{},"purl":"pkg:nix/crane?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/crane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":43,"html_url":null,"role":null,"created_at":"2026-03-06T00:00:21.292Z","updated_at":"2026-03-06T00:00:21.292Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":229},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-06-10T05:16:53.702Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":12996302,"name":"crane","ecosystem":"alpine","description":"tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/crane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":3,"first_release_published_at":"2026-01-15T20:32:31.000Z","latest_release_published_at":"2026-03-09T07:16:55.000Z","latest_release_number":"0.20.6-r8","last_synced_at":"2026-03-11T21:33:16.123Z","created_at":"2026-01-30T20:34:28.448Z","updated_at":"2026-03-17T02:03:15.701Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/crane","install_command":"apk add crane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:03:15.701Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/crane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/crane/codemeta","maintainers":[{"uuid":"kdaudt@alpinelinux.org","login":null,"name":"Kevin Daudt","email":"kdaudt@alpinelinux.org","url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","packages_count":235,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","role":null,"created_at":"2026-03-03T22:55:36.660Z","updated_at":"2026-03-03T22:55:36.660Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/kdaudt@alpinelinux.org/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27575,"maintainers_count":428,"namespaces_count":2,"keywords_count":181,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":104},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-06-10T05:17:06.512Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":7769770,"name":"crane","ecosystem":"alpine","description":"tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/crane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":5,"first_release_published_at":"2023-05-02T17:27:34.000Z","latest_release_published_at":"2023-11-17T20:59:57.000Z","latest_release_number":"0.14.0-r7","last_synced_at":"2026-03-18T23:20:41.282Z","created_at":"2023-05-22T11:57:55.465Z","updated_at":"2026-03-18T23:20:41.282Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/crane","install_command":"apk add crane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30570730,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T06:02:37.763Z","status":"ssl_error","status_checked_at":"2026-03-16T06:02:14.913Z","response_time":96,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:16.518Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":4.847638521769488,"forks_count":3.600817914318488,"docker_downloads_count":null,"average":2.112114109021994},"purl":"pkg:apk/alpine/crane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/crane/codemeta","maintainers":[{"uuid":"kdaudt@alpinelinux.org","login":null,"name":"Kevin Daudt","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","packages_count":219,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","role":null,"created_at":"2023-05-22T22:13:17.281Z","updated_at":"2023-05-22T22:13:17.281Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/kdaudt@alpinelinux.org/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1185},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-06-10T05:19:44.026Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":13644838,"name":"go-containerregistry","ecosystem":"debian","description":null,"homepage":"https://github.com/google/go-containerregistry","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T02:57:22.487Z","latest_release_published_at":"2026-02-12T02:57:22.487Z","latest_release_number":"0.20.1+ds1-1","last_synced_at":"2026-03-13T17:08:06.961Z","created_at":"2026-02-12T02:57:22.272Z","updated_at":"2026-03-17T02:02:16.252Z","registry_url":"https://tracker.debian.org/pkg/go-containerregistry","install_command":"apt-get install go-containerregistry","documentation_url":"https://packages.debian.org/trixie/go-containerregistry","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-google-go-containerregistry-dev","standards_version":"4.7.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-golang, golang-any, golang-github-containerd-stargz-snapshotter-dev, golang-github-docker-distribution-dev, golang-github-docker-docker-dev, golang-github-google-go-cmp-dev, golang-github-klauspost-compress-dev, golang-github-mitchellh-go-homedir-dev, golang-github-opencontainers-go-digest-dev, golang-github-opencontainers-image-spec-dev, golang-github-spf13-cobra-dev, golang-golang-x-oauth2-google-dev, golang-golang-x-sync-dev, golang-golang-x-tools-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30570730,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T06:02:37.763Z","status":"ssl_error","status_checked_at":"2026-03-16T06:02:14.913Z","response_time":96,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:16.252Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/go-containerregistry?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/go-containerregistry/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1987,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":316},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-06-10T05:17:04.542Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13447607,"name":"go-containerregistry","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/google/go-containerregistry","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T14:25:35.393Z","latest_release_published_at":"2026-02-08T14:25:35.393Z","latest_release_number":"0.14.0+ds1-2","last_synced_at":"2026-03-08T15:07:20.470Z","created_at":"2026-02-08T14:25:34.763Z","updated_at":"2026-03-17T02:02:16.253Z","registry_url":"https://launchpad.net/ubuntu/+source/go-containerregistry","install_command":"apt-get install go-containerregistry","documentation_url":null,"metadata":{"component":"universe","architecture":"any","priority":"optional","binary":"golang-github-google-go-containerregistry-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-containerd-stargz-snapshotter-dev, golang-github-docker-distribution-dev, golang-github-docker-docker-dev, golang-github-google-go-cmp-dev, golang-github-klauspost-compress-dev, golang-github-mitchellh-go-homedir-dev, golang-github-opencontainers-go-digest-dev, golang-github-opencontainers-image-spec-dev, golang-github-spf13-cobra-dev, golang-golang-x-oauth2-google-dev, golang-golang-x-sync-dev, golang-golang-x-tools-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30570730,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T06:02:37.763Z","status":"ssl_error","status_checked_at":"2026-03-16T06:02:14.913Z","response_time":96,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:16.253Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":0.2549626661810235,"forks_count":0.15870125139839217,"docker_downloads_count":null,"average":0.10341597939485392},"purl":"pkg:deb/ubuntu/go-containerregistry?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/go-containerregistry/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1473,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":214},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-06-10T05:17:05.787Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13387208,"name":"go-containerregistry","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/google/go-containerregistry","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T15:08:58.618Z","latest_release_published_at":"2026-02-05T15:08:58.618Z","latest_release_number":"0.14.0+ds1-2","last_synced_at":"2026-03-05T17:06:07.855Z","created_at":"2026-02-05T15:08:57.765Z","updated_at":"2026-03-17T02:02:16.520Z","registry_url":"https://launchpad.net/ubuntu/+source/go-containerregistry","install_command":"apt-get install go-containerregistry","documentation_url":null,"metadata":{"component":"universe","architecture":"any","priority":"optional","binary":"golang-github-google-go-containerregistry-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-containerd-stargz-snapshotter-dev, golang-github-docker-distribution-dev, golang-github-docker-docker-dev, golang-github-google-go-cmp-dev, golang-github-klauspost-compress-dev, golang-github-mitchellh-go-homedir-dev, golang-github-opencontainers-go-digest-dev, golang-github-opencontainers-image-spec-dev, golang-github-spf13-cobra-dev, golang-golang-x-oauth2-google-dev, golang-golang-x-sync-dev, golang-golang-x-tools-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30570730,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T06:02:37.763Z","status":"ssl_error","status_checked_at":"2026-03-16T06:02:14.913Z","response_time":96,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:16.519Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/go-containerregistry?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/go-containerregistry/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1701,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":198},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-06-10T05:17:44.581Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13475087,"name":"go-containerregistry","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/google/go-containerregistry","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-10T02:49:15.977Z","latest_release_published_at":"2026-02-10T02:49:15.977Z","latest_release_number":"0.14.0+ds1-2","last_synced_at":"2026-03-10T03:12:28.104Z","created_at":"2026-02-10T02:49:13.508Z","updated_at":"2026-03-17T02:02:16.522Z","registry_url":"https://launchpad.net/ubuntu/+source/go-containerregistry","install_command":"apt-get install go-containerregistry","documentation_url":null,"metadata":{"component":"universe","architecture":"any","priority":"optional","binary":"golang-github-google-go-containerregistry-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-containerd-stargz-snapshotter-dev, golang-github-docker-distribution-dev, golang-github-docker-docker-dev, golang-github-google-go-cmp-dev, golang-github-klauspost-compress-dev, golang-github-mitchellh-go-homedir-dev, golang-github-opencontainers-go-digest-dev, golang-github-opencontainers-image-spec-dev, golang-github-spf13-cobra-dev, golang-golang-x-oauth2-google-dev, golang-golang-x-sync-dev, golang-golang-x-tools-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30570730,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T06:02:37.763Z","status":"ssl_error","status_checked_at":"2026-03-16T06:02:14.913Z","response_time":96,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:16.521Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/go-containerregistry?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/go-containerregistry/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2223,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":444},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-06-10T05:17:48.008Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":10333595,"name":"crane","ecosystem":"alpine","description":"tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/crane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2024-06-05T13:36:39.000Z","latest_release_published_at":"2024-07-07T17:34:20.000Z","latest_release_number":"0.19.0-r5","last_synced_at":"2026-03-18T19:06:02.312Z","created_at":"2024-06-11T04:07:50.109Z","updated_at":"2026-03-18T19:06:02.312Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/crane","install_command":"apk add crane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:27.502Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/crane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/crane/codemeta","maintainers":[{"uuid":"kdaudt@alpinelinux.org","login":null,"name":"Kevin Daudt","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","packages_count":219,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Kevin Daudt","role":null,"created_at":"2024-06-11T21:29:07.152Z","updated_at":"2024-06-11T21:29:07.152Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/kdaudt@alpinelinux.org/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1476},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-06-10T05:19:00.233Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":13033060,"name":"go-containerregistry","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T15:12:36.630Z","latest_release_published_at":"2026-02-01T15:12:36.630Z","latest_release_number":"0.20.2","last_synced_at":"2026-03-05T16:45:08.514Z","created_at":"2026-02-01T15:12:36.290Z","updated_at":"2026-03-17T02:03:17.068Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=go-containerregistry","install_command":"nix-env -iA nixpkgs.go-containerregistry","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/by-name/go/go-containerregistry/package.nix#L68","metadata":{"nix_attribute":"go-containerregistry-0.20.2","position":"pkgs/by-name/go/go-containerregistry/package.nix:68","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.2","sha":"9e0ccb0a7240fe7cc820f0fc78e2e2b1ef8b7e71","kind":"commit","published_at":"2026-03-02T22:05:02.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2/manifests"},{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-03-17T02:03:17.068Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/go-containerregistry?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/go-containerregistry/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":44,"html_url":null,"role":null,"created_at":"2026-03-05T16:45:08.721Z","updated_at":"2026-03-05T16:45:08.721Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":283},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-06-10T05:16:24.031Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":3622913,"name":"github.com/Google/go-containerregistry","ecosystem":"go","description":"","homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/Google/go-containerregistry","keywords_array":[],"namespace":"github.com/Google","versions_count":50,"first_release_published_at":"2020-06-03T20:01:40.000Z","latest_release_published_at":"2026-06-17T22:00:28.000Z","latest_release_number":"v0.21.7","last_synced_at":"2026-07-12T17:29:25.762Z","created_at":"2022-04-11T08:02:03.358Z","updated_at":"2026-07-12T17:29:25.762Z","registry_url":"https://pkg.go.dev/github.com/Google/go-containerregistry","install_command":"go get github.com/Google/go-containerregistry","documentation_url":"https://pkg.go.dev/github.com/Google/go-containerregistry#section-documentation","metadata":{},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30233429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-03-17T02:01:55.416Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":null,"forks_count":null,"average":8.172500131868823},"purl":"pkg:golang/github.com/%21google/go-containerregistry","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Google/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Google/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Google/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-07T22:02:26.299Z","issues_count":247,"pull_requests_count":523,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7168860.921465969,"issues_closed_count":180,"pull_requests_closed_count":382,"pull_request_authors_count":133,"issue_authors_count":213,"avg_comments_per_issue":2.3360323886639676,"avg_comments_per_pull_request":1.8049713193116634,"merged_pull_requests_count":134,"bot_issues_count":1,"bot_pull_requests_count":171,"past_year_issues_count":24,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":939244.6285714286,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":31,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.6039603960396039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":22,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGoogle%2Fgo-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGoogle%2Fgo-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGoogle%2Fgo-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGoogle%2Fgo-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGoogle%2Fgo-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGoogle%2Fgo-containerregistry/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4141901,"name":"crane","ecosystem":"homebrew","description":"Tool for interacting with remote images and registries","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":30,"first_release_published_at":"2022-04-12T16:42:27.518Z","latest_release_published_at":"2026-06-26T14:02:50.286Z","latest_release_number":"0.21.7","last_synced_at":"2026-07-12T17:29:24.426Z","created_at":"2022-04-12T16:42:27.506Z","updated_at":"2026-07-12T21:59:55.077Z","registry_url":"https://formulae.brew.sh/formula/crane","install_command":"brew install crane","documentation_url":null,"metadata":{},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-07-03T20:05:39.000Z","size":31404,"stargazers_count":3957,"open_issues_count":174,"forks_count":657,"subscribers_count":34,"default_branch":"main","last_synced_at":"2026-07-06T21:55:51.626Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-07-06T08:14:09.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35216567,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-07T02:00:07.222Z","response_time":90,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2855,"last_synced_at":"2026-07-05T03:20:07.091Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":2116738,"followers":75015,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2026-07-05T03:20:07.091Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.7","sha":"c68d899782693b63b7549166812aa996f17a660c","kind":"commit","published_at":"2026-06-17T22:00:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.7/manifests"},{"name":"v0.21.6","sha":"53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf","kind":"commit","published_at":"2026-05-18T19:10:58.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.6/manifests"},{"name":"v0.21.5","sha":"5b80281da727dae218e1697ab8529b631b9efa64","kind":"commit","published_at":"2026-04-11T02:19:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.5/manifests"},{"name":"v0.21.4","sha":"e8813dd0a00e799459cae01d8a4659b9be2fd871","kind":"commit","published_at":"2026-04-06T18:33:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.4/manifests"},{"name":"v0.21.3","sha":"3888fb8f87385a95591ba2fa08acc97a72058f2e","kind":"commit","published_at":"2026-03-17T23:22:01.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.3/manifests"},{"name":"v0.21.2","sha":"9e0ccb0a7240fe7cc820f0fc78e2e2b1ef8b7e71","kind":"commit","published_at":"2026-03-02T22:05:02.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2/manifests"},{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-07-12T21:59:55.049Z","dependent_packages_count":0,"downloads":2778,"downloads_period":"last-month","dependent_repos_count":16,"rankings":{"downloads":13.91845196959226,"dependent_repos_count":10.587422252937111,"dependent_packages_count":19.447131997235658,"stargazers_count":9.384934346924672,"forks_count":5.16931582584658,"docker_downloads_count":null,"average":11.701451278507255},"purl":"pkg:brew/crane","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/homebrew/crane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/homebrew/crane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/homebrew/crane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-07T05:21:22.631Z","issues_count":273,"pull_requests_count":641,"avg_time_to_close_issue":11472170.18,"avg_time_to_close_pull_request":6139403.669509595,"issues_closed_count":200,"pull_requests_closed_count":469,"pull_request_authors_count":176,"issue_authors_count":235,"avg_comments_per_issue":2.238095238095238,"avg_comments_per_pull_request":1.9017160686427457,"merged_pull_requests_count":206,"bot_issues_count":1,"bot_pull_requests_count":194,"past_year_issues_count":39,"past_year_pull_requests_count":136,"past_year_avg_time_to_close_issue":3500176.0588235296,"past_year_avg_time_to_close_pull_request":1598046.75,"past_year_issues_closed_count":17,"past_year_pull_requests_closed_count":64,"past_year_pull_request_authors_count":53,"past_year_issue_authors_count":34,"past_year_avg_comments_per_issue":0.8205128205128205,"past_year_avg_comments_per_pull_request":1.5,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":36,"past_year_merged_pull_requests_count":47,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":64,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/crane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/crane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/crane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/crane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/crane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/crane/codemeta","maintainers":[],"registry":{"name":"formulae.brew.sh","url":"https://formulae.brew.sh","ecosystem":"homebrew","default":true,"packages_count":9394,"maintainers_count":0,"namespaces_count":0,"keywords_count":6774,"github":"homebrew","metadata":{"funded_packages_count":906},"icon_url":"https://github.com/homebrew.png","created_at":"2022-04-12T16:38:29.467Z","updated_at":"2026-06-10T05:20:08.995Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/namespaces"}},{"id":14447485,"name":"github.com/google/go-containerregistry/pkg/v1/mutate","ecosystem":"go","description":"Package mutate provides facilities for mutating v1.Images of any kind.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-14T15:58:17.436Z","latest_release_published_at":"2026-05-21T11:34:33.710Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.056Z","created_at":"2026-05-14T15:55:59.452Z","updated_at":"2026-07-12T17:29:20.056Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/mutate","install_command":"go get github.com/google/go-containerregistry/pkg/v1/mutate","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/mutate#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:57:10.466Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/mutate","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/mutate","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/mutate","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/mutate/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmutate/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmutate/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmutate/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmutate/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmutate/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fmutate/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447486,"name":"github.com/google/go-containerregistry/pkg/v1/stream","ecosystem":"go","description":"Package stream implements a single-pass streaming v1.Layer.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1","versions_count":49,"first_release_published_at":"2026-05-14T15:58:08.341Z","latest_release_published_at":"2026-05-21T11:34:34.798Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.258Z","created_at":"2026-05-14T15:55:59.457Z","updated_at":"2026-07-12T17:29:20.259Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/stream","install_command":"go get github.com/google/go-containerregistry/pkg/v1/stream","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/stream#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:57:10.226Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/stream","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/stream","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/stream","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/stream/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fstream/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fstream/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fstream/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fstream/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fstream/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fstream/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13255298,"name":"go-containerregistry","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T04:04:46.715Z","latest_release_published_at":"2026-02-02T04:04:46.715Z","latest_release_number":"0.16.1","last_synced_at":"2026-04-15T17:01:32.803Z","created_at":"2026-02-02T04:04:41.319Z","updated_at":"2026-04-15T17:01:32.804Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=go-containerregistry","install_command":"nix-env -iA nixpkgs.go-containerregistry","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/tools/go-containerregistry/default.nix#L38","metadata":{"nix_attribute":"go-containerregistry-0.16.1","position":"pkgs/development/tools/go-containerregistry/default.nix:38","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-04T02:34:07.000Z","size":30800,"stargazers_count":3762,"open_issues_count":171,"forks_count":623,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-07T17:41:21.822Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-06T08:19:21.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30233429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-07T22:02:39.654Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/go-containerregistry?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/go-containerregistry","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/go-containerregistry","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/go-containerregistry/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-07T22:02:26.299Z","issues_count":247,"pull_requests_count":523,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7168860.921465969,"issues_closed_count":180,"pull_requests_closed_count":382,"pull_request_authors_count":133,"issue_authors_count":213,"avg_comments_per_issue":2.3360323886639676,"avg_comments_per_pull_request":1.8049713193116634,"merged_pull_requests_count":134,"bot_issues_count":1,"bot_pull_requests_count":171,"past_year_issues_count":24,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":939244.6285714286,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":31,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.6039603960396039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":22,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/go-containerregistry/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/go-containerregistry/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/go-containerregistry/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/go-containerregistry/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/go-containerregistry/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/go-containerregistry/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":43,"html_url":null,"role":null,"created_at":"2026-03-04T11:41:12.544Z","updated_at":"2026-03-04T11:41:12.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":229},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-06-10T05:16:53.702Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":14448154,"name":"github.com/google/go-containerregistry/pkg/v1/remote/transport","ecosystem":"go","description":"Package transport provides facilities for setting up an authenticated\nhttp.RoundTripper given an Authenticator and base RoundTripper.  See\ntransport.New for more information.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/v1/remote","versions_count":49,"first_release_published_at":"2026-05-14T21:42:01.563Z","latest_release_published_at":"2026-05-21T11:34:30.633Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:23.409Z","created_at":"2026-05-14T21:40:47.018Z","updated_at":"2026-07-12T17:29:23.409Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/remote/transport","install_command":"go get github.com/google/go-containerregistry/pkg/v1/remote/transport","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/v1/remote/transport#section-documentation","metadata":{},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-05-06T02:34:05.000Z","size":31623,"stargazers_count":3852,"open_issues_count":171,"forks_count":639,"subscribers_count":34,"default_branch":"main","last_synced_at":"2026-05-07T12:42:16.054Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-05-05T21:49:12.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":48,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32797780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-08T08:22:46.396Z","status":"ssl_error","status_checked_at":"2026-05-08T08:22:45.650Z","response_time":54,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-05-14T21:40:47.398Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":1.2654659884980584,"forks_count":1.2498533392605307,"docker_downloads_count":null,"average":3.082638564246487},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/v1/remote/transport","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/remote/transport","docker_dependents_count":1,"docker_downloads_count":9,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/v1/remote/transport","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/v1/remote/transport/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote%2Ftransport/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote%2Ftransport/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote%2Ftransport/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote%2Ftransport/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote%2Ftransport/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fv1%2Fremote%2Ftransport/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14447483,"name":"github.com/google/go-containerregistry/internal/redact","ecosystem":"go","description":"Package redact contains a simple context signal for redacting requests.","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/internal","versions_count":39,"first_release_published_at":"2026-05-18T19:23:55.842Z","latest_release_published_at":"2026-05-21T11:34:34.581Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:22.965Z","created_at":"2026-05-14T15:55:59.430Z","updated_at":"2026-07-12T17:29:22.966Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/redact","install_command":"go get github.com/google/go-containerregistry/internal/redact","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/redact#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:57:13.962Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/internal/redact","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/redact","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/redact","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/internal/redact/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fredact/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fredact/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fredact/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fredact/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fredact/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fredact/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":12718036,"name":"krane","ecosystem":"alpine","description":"Drop-in replacement for crane with built-in cloud workload identity auth","homepage":"https://github.com/google/go-containerregistry/tree/main/cmd/krane","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"community","versions_count":3,"first_release_published_at":"2026-01-22T23:46:13.000Z","latest_release_published_at":"2026-03-06T09:27:38.000Z","latest_release_number":"0.20.7-r2","last_synced_at":"2026-04-01T01:19:42.446Z","created_at":"2026-01-25T13:24:10.300Z","updated_at":"2026-04-01T01:19:42.736Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/krane","install_command":"apk add krane","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:39.989Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":12.309474768280124,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":6.154737384140062},"purl":"pkg:apk/alpine/krane?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/krane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/krane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/krane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/krane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/krane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/krane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/krane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/krane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/krane/codemeta","maintainers":[{"uuid":"s10gopal@gmail.com","login":null,"name":"Gopal Sharma","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Gopal Sharma","packages_count":1,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Gopal Sharma","role":null,"created_at":"2026-03-01T00:26:28.439Z","updated_at":"2026-03-01T00:26:28.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/s10gopal@gmail.com/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39755,"maintainers_count":899,"namespaces_count":3,"keywords_count":6579,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2727},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-06-10T05:16:50.784Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":13253843,"name":"gcrane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T03:59:06.550Z","latest_release_published_at":"2026-02-02T03:59:06.550Z","latest_release_number":"0.16.1","last_synced_at":"2026-04-18T19:02:57.958Z","created_at":"2026-02-02T03:59:05.214Z","updated_at":"2026-04-18T19:02:57.958Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=gcrane","install_command":"nix-env -iA nixpkgs.gcrane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/tools/go-containerregistry/default.nix#L38","metadata":{"nix_attribute":"go-containerregistry-0.16.1","position":"pkgs/development/tools/go-containerregistry/default.nix:38","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603849,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-17T02:02:39.982Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/gcrane?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/gcrane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/gcrane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/gcrane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/gcrane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/gcrane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/gcrane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/gcrane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/gcrane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/gcrane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":43,"html_url":null,"role":null,"created_at":"2026-03-04T21:37:31.148Z","updated_at":"2026-03-04T21:37:31.148Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/yurrriq/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":229},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-06-10T05:16:53.702Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":12753581,"name":"gcrane","ecosystem":"nixpkgs","description":"Tools for interacting with remote images and registries including crane and gcrane","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2026-01-26T05:24:37.221Z","latest_release_published_at":"2026-03-26T11:16:33.528Z","latest_release_number":"0.21.3","last_synced_at":"2026-03-26T11:16:34.107Z","created_at":"2026-01-26T05:24:37.026Z","updated_at":"2026-03-26T11:20:30.876Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=gcrane","install_command":"nix-env -iA nixpkgs.gcrane","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/by-name/go/go-containerregistry/package.nix#L69","metadata":{"nix_attribute":"go-containerregistry-0.21.3","position":"pkgs/by-name/go/go-containerregistry/package.nix:69","platforms":["x86_64-darwin","aarch64-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["crane","gcrane","out"]},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-03-12T20:53:54.000Z","size":31141,"stargazers_count":3777,"open_issues_count":172,"forks_count":628,"subscribers_count":33,"default_branch":"main","last_synced_at":"2026-03-16T16:18:51.449Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-03-16T09:28:11.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30603880,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"online","status_checked_at":"2026-03-17T02:00:07.764Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-26T11:20:30.854Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/gcrane?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/gcrane","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/gcrane","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/gcrane/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-16T06:31:14.914Z","issues_count":248,"pull_requests_count":529,"avg_time_to_close_issue":11138467.922222223,"avg_time_to_close_pull_request":7081468.240310078,"issues_closed_count":180,"pull_requests_closed_count":387,"pull_request_authors_count":136,"issue_authors_count":214,"avg_comments_per_issue":2.3266129032258065,"avg_comments_per_pull_request":1.8090737240075614,"merged_pull_requests_count":137,"bot_issues_count":1,"bot_pull_requests_count":173,"past_year_issues_count":24,"past_year_pull_requests_count":103,"past_year_avg_time_to_close_issue":2035616.2,"past_year_avg_time_to_close_pull_request":872422.475,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":34,"past_year_issue_authors_count":23,"past_year_avg_comments_per_issue":0.7083333333333334,"past_year_avg_comments_per_pull_request":0.7087378640776699,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":25,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"mattmoor","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/gcrane/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/gcrane/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/gcrane/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/gcrane/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/gcrane/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/gcrane/codemeta","maintainers":[{"uuid":"yurrriq","login":null,"name":"Eric Bailey","email":"eric@ericb.me","url":"https://github.com/yurrriq","packages_count":147,"html_url":null,"role":null,"created_at":"2026-02-26T10:08:18.033Z","updated_at":"2026-02-26T10:08:18.033Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/yurrriq/packages"},{"uuid":"ryan4yin","login":null,"name":"Ryan Yin","email":"xiaoyin_c@qq.com","url":"https://github.com/ryan4yin","packages_count":79,"html_url":null,"role":null,"created_at":"2026-02-26T10:08:18.099Z","updated_at":"2026-02-26T10:08:18.099Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/ryan4yin/packages"}],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":150413,"maintainers_count":4791,"namespaces_count":0,"keywords_count":3210,"github":"NixOS","metadata":{"funded_packages_count":1663},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-07-09T05:02:48.469Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":14447472,"name":"github.com/google/go-containerregistry/internal/retry/wait","ecosystem":"go","description":"Package wait is a subset of k8s.io/apimachinery to avoid conflicts\nin dependencies (specifically, logging).","homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/internal/retry","versions_count":39,"first_release_published_at":"2026-05-14T15:57:16.506Z","latest_release_published_at":"2026-05-21T11:34:33.344Z","latest_release_number":"v0.21.6","last_synced_at":"2026-07-12T17:29:20.352Z","created_at":"2026-05-14T15:55:59.161Z","updated_at":"2026-07-12T17:29:20.353Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/retry/wait","install_command":"go get github.com/google/go-containerregistry/internal/retry/wait","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/internal/retry/wait#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T15:56:25.746Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/google/go-containerregistry/internal/retry/wait","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/retry/wait","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/internal/retry/wait","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/internal/retry/wait/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry%2Fwait/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry%2Fwait/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry%2Fwait/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry%2Fwait/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry%2Fwait/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Finternal%2Fretry%2Fwait/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3850931,"name":"github.com/google/go-containerregistry/pkg/authn/k8schain","ecosystem":"go","description":null,"homepage":"https://github.com/google/go-containerregistry","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/go-containerregistry","keywords_array":[],"namespace":"github.com/google/go-containerregistry/pkg/authn","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-07-14T16:10:14.537Z","latest_release_number":null,"last_synced_at":"2026-07-14T16:10:18.739Z","created_at":"2022-04-11T21:10:30.373Z","updated_at":"2026-07-14T16:10:18.740Z","registry_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/authn/k8schain","install_command":"go get github.com/google/go-containerregistry/pkg/authn/k8schain","documentation_url":"https://pkg.go.dev/github.com/google/go-containerregistry/pkg/authn/k8schain#section-documentation","metadata":{},"repo_metadata":{"id":37514334,"uuid":"125253663","full_name":"google/go-containerregistry","owner":"google","description":"Go library and CLIs for working with container registries","archived":false,"fork":false,"pushed_at":"2026-06-12T17:46:16.000Z","size":31357,"stargazers_count":3918,"open_issues_count":168,"forks_count":652,"subscribers_count":34,"default_branch":"main","last_synced_at":"2026-06-13T07:07:43.156Z","etag":null,"topics":["container","container-registry","docker","registry"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-03-14T18:02:49.000Z","updated_at":"2026-06-13T04:35:55.000Z","dependencies_parsed_at":"2025-12-11T10:04:20.688Z","dependency_job_id":null,"html_url":"https://github.com/google/go-containerregistry","commit_stats":{"total_commits":992,"total_committers":168,"mean_commits":5.904761904761905,"dds":0.654233870967742,"last_synced_commit":"6bce25ecf0297c1aa9072bc665b5cf58d53e1c54"},"previous_names":[],"tags_count":49,"template":false,"template_full_name":null,"purl":"pkg:github/google/go-containerregistry","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/sbom","scorecard":{"id":386796,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/go-containerregistry","commit":"59a4b85930392a30c39462519adc8a2026d47181"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":8,"reason":"7 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yml:42","Info: jobLevel permissions set to 'read-all': .github/workflows/release.yml:53","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/analyze.yaml:11","Info: topLevel 'actions' permission set to 'read': .github/workflows/analyze.yaml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/analyze.yaml:13","Warn: no topLevel permission defined: .github/workflows/boilerplate.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/bump-deps.yaml:9","Warn: no topLevel permission defined: .github/workflows/donotsubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ecr-auth.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/ghcr-auth.yaml:10","Info: topLevel 'packages' permission set to 'read': .github/workflows/ghcr-auth.yaml:11","Warn: no topLevel permission defined: .github/workflows/presubmit.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yaml:1","Warn: no topLevel permission defined: .github/workflows/style.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:8"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/analyze.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/analyze.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/boilerplate.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/boilerplate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump-deps.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/bump-deps.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/donotsubmit.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/donotsubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecr-auth.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ecr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr-auth.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/ghcr-auth.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presubmit.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/presubmit.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/stale.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/style.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/style.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/google/go-containerregistry/test.yaml/main?enable=pin","Warn: goCommand not pinned by hash: hack/presubmit.sh:29","Warn: goCommand not pinned by hash: hack/update-codegen.sh:37","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:  11 out of  13 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":6,"reason":"3 out of the last 5 releases have a total of 3 signed artifacts.","details":["Warn: release artifact v0.20.3 not signed: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 not signed: https://api.github.com/repos/google/go-containerregistry/releases/168946912","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.6","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.5","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/google/go-containerregistry/releases/tag/v0.20.4","Warn: release artifact v0.20.3 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/194980036","Warn: release artifact v0.20.2 does not have provenance: https://api.github.com/repos/google/go-containerregistry/releases/168946912"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 22 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T16:49:41.104Z","repository_id":37514334,"created_at":"2025-08-18T16:49:41.104Z","updated_at":"2025-08-18T16:49:41.104Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34285657,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-13T02:00:06.617Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2823,"last_synced_at":"2026-05-16T16:05:42.907Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":2113149,"followers":72588,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2026-05-16T16:05:42.908Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[{"name":"v0.21.6","sha":"53f7e39e15bfd6aeea6a5f733ee1a8fcf54c15cf","kind":"commit","published_at":"2026-05-18T19:10:58.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.6/manifests"},{"name":"v0.21.5","sha":"5b80281da727dae218e1697ab8529b631b9efa64","kind":"commit","published_at":"2026-04-11T02:19:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.5/manifests"},{"name":"v0.21.4","sha":"e8813dd0a00e799459cae01d8a4659b9be2fd871","kind":"commit","published_at":"2026-04-06T18:33:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.4/manifests"},{"name":"v0.21.3","sha":"3888fb8f87385a95591ba2fa08acc97a72058f2e","kind":"commit","published_at":"2026-03-17T23:22:01.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.3/manifests"},{"name":"v0.21.2","sha":"9e0ccb0a7240fe7cc820f0fc78e2e2b1ef8b7e71","kind":"commit","published_at":"2026-03-02T22:05:02.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.2/manifests"},{"name":"v0.21.1","sha":"85f2bf5f7303fc95161f334e4fc2e66c36e12b1e","kind":"commit","published_at":"2026-02-24T03:15:29.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"8e2d6a68179f6f0feaf249b922bdc4d892ab273b","kind":"commit","published_at":"2026-02-19T23:46:31.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.21.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.21.0/manifests"},{"name":"v0.20.8","sha":"b58334f7618a2cd1fbf7409c750aef475d20ad94","kind":"commit","published_at":"2026-02-19T22:32:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.8","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.8/manifests"},{"name":"v0.20.7","sha":"e075f209120b2467fd1b7d24727f1890a0edb74a","kind":"commit","published_at":"2025-11-24T22:20:20.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.7","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.7/manifests"},{"name":"v0.20.6","sha":"59a4b85930392a30c39462519adc8a2026d47181","kind":"commit","published_at":"2025-06-13T21:51:07.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.6","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.6/manifests"},{"name":"v0.20.5","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.5","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.5/manifests"},{"name":"v0.20.4","sha":"4eb8c4d84ef07af279d5dcc0b210d9eaa7bc79e3","kind":"commit","published_at":"2025-05-21T00:03:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.4/manifests"},{"name":"v0.20.3","sha":"c4dd792fa06c1f8b780ad90c8ab4f38b4eac05bd","kind":"commit","published_at":"2025-01-15T18:54:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.3/manifests"},{"name":"v0.20.2","sha":"c195f151efe3369874c72662cd69ad43ee485128","kind":"commit","published_at":"2024-08-06T16:18:38.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.2/manifests"},{"name":"v0.20.1","sha":"c3d1dcc932076c15b65b8b9acfff1d47ded2ebf9","kind":"commit","published_at":"2024-07-17T01:32:55.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"d36047ae385302d20acd872e28f036a475fb9417","kind":"commit","published_at":"2024-07-08T19:12:11.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.20.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.20.0/manifests"},{"name":"v0.19.2","sha":"1b4e4078a545f2b6f96766a064b45ee77cdbefdd","kind":"commit","published_at":"2024-06-11T16:19:25.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.2/manifests"},{"name":"v0.19.1","sha":"8b3c3036d612bcb3c1147fe11c2d1818dc432329","kind":"commit","published_at":"2024-03-13T21:30:35.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"8dadbe76ff8c20d0e509406f04b7eade43baa6c1","kind":"commit","published_at":"2024-01-29T19:24:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.19.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"a0658aa1d0cc7a7f1bcc4a3af9155335b6943f40","kind":"commit","published_at":"2024-01-08T19:52:14.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.18.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.18.0/manifests"},{"name":"v0.17.0","sha":"4fdaa32ee934cd178b6eb41b3096419a52ef426a","kind":"commit","published_at":"2023-11-29T21:32:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.17.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"a54d64203cffcbf94146e04069aae4a97f228ee2","kind":"commit","published_at":"2023-08-02T20:59:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"ea19b579661d99bc753c92e93730b8aab6ecd31b","kind":"commit","published_at":"2023-07-31T21:40:21.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.16.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"dbecb1de8cfa6cb8b133b5303aef0175b158915e","kind":"commit","published_at":"2023-05-16T20:57:44.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0b12f56b375240c8534672bb356391ef9a5d8316","kind":"commit","published_at":"2023-05-05T16:53:54.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"69d1a1973115827d9f082881efff2cb80581d28f","kind":"commit","published_at":"2023-05-04T18:01:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.15.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"4b081f801f399fa293f23e42ba4c4ac6a6003f2c","kind":"commit","published_at":"2023-03-15T20:00:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.14.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"1e09daa93eb1140eb36701bb8af57496866a56ff","kind":"commit","published_at":"2023-01-20T18:47:56.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.13.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.13.0/manifests"},{"name":"v0.12.1","sha":"76ae8192efd86521005acc6d6d3d43ef10d9e6be","kind":"commit","published_at":"2022-11-10T03:01:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"3413eb6ce4b011eeda196bc0461f5d70826e9a47","kind":"commit","published_at":"2022-10-19T20:27:46.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.12.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"31786c6cbb82d6ec4fb8eb79cd9387905130534e","kind":"commit","published_at":"2022-07-20T19:50:16.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.11.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"0c40ec8ad2226e1d374f1f1c01d5694f505ff946","kind":"commit","published_at":"2022-06-21T17:53:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.10.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"49e51707501a2e9eff2ee03f9c3df830dd76dbad","kind":"commit","published_at":"2022-05-17T14:02:43.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.9.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"d9bfbcb99e526b2a9417160e209b816e1b1fb6bd","kind":"commit","published_at":"2022-01-05T22:06:05.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.8.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.8.0/manifests"},{"name":"v0.6.1","sha":"99fe0b005a03008f7080fbfede930bdc192c3bb7","kind":"commit","published_at":"2021-12-28T21:54:42.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.1/manifests"},{"name":"v0.7.0","sha":"542cd568cb6abd9dfa1d11a8d9b8812678aab8ff","kind":"commit","published_at":"2021-11-12T21:00:45.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.7.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"092caf0f50b9a09588b653e08480ec4077cb289f","kind":"commit","published_at":"2021-07-30T17:26:09.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.6.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"c061b3f39cff652d18f95ee23ebfd39cb3f5ee89","kind":"commit","published_at":"2021-05-17T22:51:28.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"a58f1d55bc799c55deb7cfaa35ef5234e9da7ff3","kind":"commit","published_at":"2021-04-28T18:01:26.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.5.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"efb2d62d93a7705315b841d0544cb5b13565ff2a","kind":"commit","published_at":"2021-02-25T14:27:06.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4eb508cda163bef9f0859b30f22168e2a095281e","kind":"commit","published_at":"2021-01-13T22:10:12.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.4.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"c95d7bdd6359dab9cbf575fae14e3389e3efa84e","kind":"commit","published_at":"2020-12-22T00:14:22.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.3.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"f937abdc5c9af165a6921363fb49da3fe6cef421","kind":"commit","published_at":"2020-12-01T15:48:15.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"7c586d4a0cef22340876855603735136c846793e","kind":"commit","published_at":"2020-12-01T00:50:30.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.2.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"8a2841911ffee4f6892ca0083e89752fb46c48dd","kind":"commit","published_at":"2020-10-22T01:19:50.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.4","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"2ff6f48e2524c5b02a915978ff247802451efa6b","kind":"commit","published_at":"2020-09-16T21:54:10.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.3","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"cecf3907384cf6c55b9fddf4e7e8725ba206d5e5","kind":"commit","published_at":"2020-08-21T19:27:27.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.2","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"2a1a46d929f8e396080340669edf5456a67493b5","kind":"commit","published_at":"2020-06-11T17:14:17.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.1","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"57766c1fee7bdc67c4e70680efffed535d50b459","kind":"commit","published_at":"2020-06-03T20:01:40.000Z","download_url":"https://codeload.github.com/google/go-containerregistry/tar.gz/v0.1.0","html_url":"https://github.com/google/go-containerregistry/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/google/go-containerregistry@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-06-17T07:03:44.656Z","dependent_packages_count":249,"downloads":null,"downloads_period":null,"dependent_repos_count":912,"rankings":{"downloads":null,"dependent_repos_count":0.25307306676303637,"dependent_packages_count":0.3103352957074052,"stargazers_count":1.3560199049923667,"forks_count":1.3910292014492411,"docker_downloads_count":0.5603540764270395,"average":0.7741623090678178},"purl":"pkg:golang/github.com/google/go-containerregistry/pkg/authn/k8schain","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/authn/k8schain","docker_dependents_count":204,"docker_downloads_count":1397983,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/go-containerregistry/pkg/authn/k8schain","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/go-containerregistry/pkg/authn/k8schain/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-06-16T05:24:57.407Z","issues_count":268,"pull_requests_count":626,"avg_time_to_close_issue":11578321.176767677,"avg_time_to_close_pull_request":6261256.901960785,"issues_closed_count":198,"pull_requests_closed_count":459,"pull_request_authors_count":171,"issue_authors_count":231,"avg_comments_per_issue":2.2723880597014925,"avg_comments_per_pull_request":1.8801916932907348,"merged_pull_requests_count":199,"bot_issues_count":1,"bot_pull_requests_count":188,"past_year_issues_count":35,"past_year_pull_requests_count":123,"past_year_avg_time_to_close_issue":5409018.5,"past_year_avg_time_to_close_pull_request":1792807.2037037036,"past_year_issues_closed_count":16,"past_year_pull_requests_closed_count":54,"past_year_pull_request_authors_count":49,"past_year_issue_authors_count":31,"past_year_avg_comments_per_issue":0.8571428571428571,"past_year_avg_comments_per_pull_request":1.3252032520325203,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":40,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","maintainers":[{"login":"jonjohnsonjr","count":64,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"},{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"},{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"},{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"},{"login":"deitch","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"},{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}],"active_maintainers":[{"login":"jonjohnsonjr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fk8schain/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fk8schain/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fk8schain/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fk8schain/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fk8schain/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Fgo-containerregistry%2Fpkg%2Fauthn%2Fk8schain/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2212091,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":7681,"full_name":"google/go-containerregistry","default_branch":"main","total_commits":1119,"total_committers":205,"total_bot_commits":78,"total_bot_committers":1,"mean_commits":5.458536585365854,"dds":0.6916890080428955,"past_year_total_commits":116,"past_year_total_committers":41,"past_year_total_bot_commits":32,"past_year_total_bot_committers":1,"past_year_mean_commits":2.8292682926829267,"past_year_dds":0.7241379310344828,"last_synced_at":"2026-07-22T05:25:43.379Z","last_synced_commit":"e8b2b9e51df688279dcd9fe4f14715184b425d9d","created_at":"2023-03-07T09:46:20.343Z","updated_at":"2026-07-22T05:24:37.377Z","committers":[{"name":"jonjohnsonjr","email":"jonjohnson@google.com","login":"jonjohnsonjr","count":345},{"name":"Jason Hall","email":"jasonhall@redhat.com","login":"imjasonh","count":176},{"name":"Matt Moore","email":"mattmoor@google.com","login":"mattmoor","count":90},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":78},{"name":"Jared","email":"jrsb@google.com","login":"Subserial","count":26},{"name":"Dave Protasowski","email":"dprotaso@gmail.com","login":"dprotaso","count":19},{"name":"Colin","email":"31663880+clrprod","login":"clrprod","count":18},{"name":"knative-automation","email":"automation@knative.team","login":"knative-automation","count":14},{"name":"Avi Deitcher","email":"avi@deitcher.net","login":"deitch","count":14},{"name":"mattmoor-sockpuppet","email":"32418083+mattmoor-sockpuppet","login":"mattmoor-sockpuppet","count":12},{"name":"Jake Sanders","email":"1200829+dekkagaijin","login":"dekkagaijin","count":8},{"name":"dlorenc","email":"lorenc.d@gmail.com","login":"dlorenc","count":8},{"name":"Carlos Tadeu Panato Junior","email":"ctadeu@gmail.com","login":"cpanato","count":7},{"name":"Sebastiaan van Stijn","email":"thaJeztah","login":"thaJeztah","count":6},{"name":"Teppei Fukuda","email":"knqyf263@gmail.com","login":"knqyf263","count":6},{"name":"Nick Kubala","email":"nkubala","login":"nkubala","count":6},{"name":"Glyn Normington","email":"gnormington@pivotal.io","login":"glyn","count":5},{"name":"Muhammad Ahsan Gill","email":"121255477+iahsanGill","login":"iahsanGill","count":5},{"name":"Suvanjan Mukherjee","email":"suvanjan@google.com","login":"smukherj1","count":5},{"name":"evilgensec","email":"evil.gen.sec@gmail.com","login":"evilgensec","count":5},{"name":"Batuhan Apaydın","email":"batuhan.apaydin@trendyol.com","login":"developer-guy","count":5},{"name":"Jake Sanders","email":"jsand@google.com","login":null,"count":5},{"name":"Sahin Yort","email":"thesayyn@gmail.com","login":"thesayyn","count":4},{"name":"Sharif Elgamal","email":"selgamal@google.com","login":"sharifelgamal","count":4},{"name":"asraa","email":"asraa@google.com","login":"asraa","count":4},{"name":"Vincent Demeester","email":"vincent@sbr.pm","login":"vdemeester","count":4},{"name":"David Schneider","email":"dsbrng25b@gmail.com","login":"dvob","count":4},{"name":"Ali Asghar","email":"98263017+alliasgher","login":"alliasgher","count":4},{"name":"Anatoli Babenia","email":"anatoli@rainforce.org","login":"abitrolly","count":4},{"name":"Malte Poll","email":"1780588+malt3","login":"malt3","count":3},{"name":"Kyle Tarplee","email":"kmtarplee@ieee.org","login":"ktarplee","count":3},{"name":"Josh Dolitsky","email":"393494+jdolitsky","login":"jdolitsky","count":3},{"name":"Markus Thömmes","email":"markusthoemmes@me.com","login":"markusthoemmes","count":3},{"name":"Rohan Patnaik","email":"rohanpatnaik1997@gmail.com","login":"rohan-patnaik","count":3},{"name":"Ryan Miller","email":"rvmiller89@gmail.com","login":"rvmiller89","count":3},{"name":"hhstu","email":"55697154+hhstu","login":"hhstu","count":3},{"name":"Dennis Leon","email":"leonde@vmware.com","login":"DennisDenuto","count":3},{"name":"John Howard","email":"howardjohn@google.com","login":"howardjohn","count":3},{"name":"Luiz Carvalho","email":"lucarval@redhat.com","login":"lcarva","count":3},{"name":"Gustavo Arantes","email":"dev.gustavoa@gmail.com","login":"gnix0","count":3},{"name":"Eric Stroczynski","email":"estrozgh@fastmail.com","login":"estroz","count":3},{"name":"Dayna Blackwell","email":"dayna@blackwell-systems.com","login":"blackwell-systems","count":3},{"name":"Koichi Shiraishi","email":"zchee.io@gmail.com","login":"zchee","count":2},{"name":"jszroberto","email":"totemteleko@gmail.com","login":null,"count":2},{"name":"Maisem Ali","email":"3953239+maisem","login":"maisem","count":2},{"name":"Matthew McNew","email":"me@mattmcnew.com","login":"matthewmcnew","count":2},{"name":"Markus Lippert","email":"lippertmarkus@gmx.de","login":"lippertmarkus","count":2},{"name":"Martin Kibera","email":"105651142+jammie-jelly","login":"jammie-jelly","count":2},{"name":"Shingo Omura","email":"everpeace@gmail.com","login":"everpeace","count":2},{"name":"Tianon Gravi","email":"admwiggin@gmail.com","login":"tianon","count":2},{"name":"Vanessasaurus","email":"814322+vsoch","login":"vsoch","count":2},{"name":"alex weidner","email":"aw185176@ncr.com","login":"aw185176","count":2},{"name":"cshou","email":"cshou@google.com","login":"yolocs","count":2},{"name":"ehmm","email":"32422402+ehmm","login":"ehmm","count":2},{"name":"laurentsimon","email":"64505099+laurentsimon","login":"laurentsimon","count":2},{"name":"micnncim","email":"micnncim@gmail.com","login":"micnncim","count":2},{"name":"Hanzhen Yi","email":"hanzhen.m.yi@gmail.com","login":"yihanzhen","count":2},{"name":"Brad Moylan","email":"moylan.brad@gmail.com","login":"bmoylan","count":2},{"name":"Zadkiel AHARONIAN","email":"hello@zadkiel.fr","login":"aslafy-z","count":2},{"name":"Aaron Prindle","email":"aprindle@google.com","login":"aaron-prindle","count":2},{"name":"Alexey Igrychev","email":"alexey.igrychev@flant.com","login":"alexey-igrychev","count":2},{"name":"Ben Krieger","email":"ben.krieger@intel.com","login":"ben-krieger","count":2},{"name":"Daniel Mangum","email":"31777345+hasheddan","login":"hasheddan","count":2},{"name":"Daryl Finlay","email":"djfinlay","login":"djfinlay","count":2},{"name":"Ethan Lowman","email":"53835328+ethan-lowman-dd","login":"ethan-lowman-dd","count":2},{"name":"Gustavo Silva Paiva","email":"guustavo.paiva@gmail.com","login":"paivagustavo","count":2},{"name":"Josh Chorlton","email":"jchorl","login":"jchorl","count":2},{"name":"Kohei Tokunaga","email":"43872416+ktock","login":"ktock","count":2},{"name":"Benjamin Einaudi","email":"antechrestos","login":"antechrestos","count":1},{"name":"Benjamin Elder","email":"bentheelder@google.com","login":"BenTheElder","count":1},{"name":"Berndt Jung","email":"bjung@vmware.com","login":"berndtj","count":1},{"name":"江子牙","email":"jw19961019@gmail.com","login":null,"count":1},{"name":"Billy Lynch","email":"1844673+wlynch","login":"wlynch","count":1},{"name":"Boby chaudhary","email":"73424060+bobychaudhary","login":"bobychaudhary","count":1},{"name":"Craig Jellick","email":"craig.jellick@gmail.com","login":"cjellick","count":1},{"name":"Christian Schlotter","email":"chrischdi","login":"chrischdi","count":1},{"name":"Christian Jantz","email":"chris@safewrd.com","login":"chrisz100","count":1},{"name":"Carlos Santana","email":"csantana23@gmail.com","login":"csantanapr","count":1},{"name":"Carlos Alexandro Becker","email":"caarlos0","login":"caarlos0","count":1},{"name":"Brian de Alwis","email":"bsd@mt.ca","login":"briandealwis","count":1},{"name":"Brandt Keller","email":"43887158+brandtkeller","login":"brandtkeller","count":1},{"name":"Brandon Stoll","email":"bstoll","login":"bstoll","count":1},{"name":"Brad Hoekstra","email":"bhoekstra@google.com","login":"bradhoekstra","count":1},{"name":"Dan Luhring","email":"luhring","login":"luhring","count":1},{"name":"Dave Goddard","email":"dave@goddard.id.au","login":"dgodd","count":1},{"name":"Dan Tanner","email":"dan@dantanner.com","login":"dtanner","count":1},{"name":"Alfonso Acosta","email":"fons@weave.works","login":null,"count":1},{"name":"Graham Jenson","email":"graham.jenson@coinbase.com","login":null,"count":1},{"name":"Ian Lewis","email":"ianlewis@google.com","login":null,"count":1},{"name":"dlorenc","email":"dlorenc@google.com","login":null,"count":1},{"name":"tydra-wang","email":"wjunjie96@gmail.com","login":null,"count":1},{"name":"Ammar Bandukwala","email":"ammar@ammar.io","login":"ammario","count":1},{"name":"Alfonso Acosta","email":"fons@syntacticsugar.consulting","login":"2opremio","count":1},{"name":"Alex Suraci","email":"suraci.alex@gmail.com","login":"vito","count":1},{"name":"Alex Lindeman","email":"139387+aelindeman","login":"aelindeman","count":1},{"name":"Akshay Pant","email":"akshay.akshaypant@gmail.com","login":"theakshaypant","count":1},{"name":"Ajay Kemparaj","email":"ajaykemparaj@gmail.com","login":"ajayk","count":1},{"name":"Adrian Duong","email":"adrian.duong@gmail.com","login":"aduong","count":1},{"name":"Adil Burak Şen","email":"56400880+adilburaksen","login":"adilburaksen","count":1},{"name":"AdamKorcz","email":"44787359+AdamKorcz","login":"AdamKorcz","count":1},{"name":"Aaron Mark","email":"64331623+amarkdotdev","login":"amarkdotdev","count":1},{"name":"Anders Björklund","email":"anders.f.bjorklund@gmail.com","login":"afbjorklund","count":1},{"name":"Andreas Bergmeier","email":"abergmeier@gmx.net","login":"abergmeier","count":1},{"name":"AndrewCharlesHay","email":"hay.149@osu.edu","login":"AndrewCharlesHay","count":1},{"name":"Ulrich Schreiner","email":"ulrich.schreiner@gmail.com","login":"ulrichSchreiner","count":1},{"name":"Titi Wangsa Damhore","email":"111611+twdamhore","login":"twdamhore","count":1},{"name":"Tim Ramlot","email":"42113979+inteon","login":"inteon","count":1},{"name":"Taylor Barrella","email":"tbarrella@gmail.com","login":"tbarrella","count":1},{"name":"Steven Locke","email":"StevenLocke","login":"StevenLocke","count":1},{"name":"Stephen Levine","email":"stephen.levine@gmail.com","login":"sclevine","count":1},{"name":"Stephanie Wei","email":"72533858+Stephanie0829","login":"Stephanie0829","count":1},{"name":"Stephane Albert","email":"sheeprine@nullplace.com","login":"sheeprine","count":1},{"name":"Spike Curtis","email":"spike@spikecurtis.com","login":"spikecurtis","count":1},{"name":"Siddhartha Bagaria","email":"starsid@gmail.com","login":"siddharthab","count":1},{"name":"Shubham Sharma","email":"shubhash@microsoft.com","login":"shubham1172","count":1},{"name":"Sebastian","email":"banaszkiewicz.sebastian@gmail.com","login":"seba-ban","count":1},{"name":"Scott Moser","email":"smoser@brickies.net","login":"smoser","count":1},{"name":"Scott Andrews","email":"scott@andrews.me","login":"scothis","count":1},{"name":"Sascha Schwarze","email":"schwarzs@de.ibm.com","login":"SaschaSchwarze0","count":1},{"name":"Sambhav Kothari","email":"sambhavs.email@gmail.com","login":"sambhav","count":1},{"name":"Raul Cabello Martin","email":"raulcabm@gmail.com","login":"raulcabello","count":1},{"name":"Rafael F.","email":"r4f4rfs@gmail.com","login":"r4f4","count":1},{"name":"Pete Wagner","email":"1559510+thepwagner","login":"thepwagner","count":1},{"name":"Paulo Gomes","email":"paulo.gomes.uk@gmail.com","login":"pjbgf","count":1},{"name":"Paul Bastide","email":"paul@bastide.org","login":"prb112","count":1},{"name":"Oleksandr Kozachenko","email":"okozachenko1203@gmail.com","login":"okozachenko1203","count":1},{"name":"Nándor István Krácser","email":"bonifaido@gmail.com","login":"bonifaido","count":1},{"name":"Nicholas Asimov","email":"nicholas@asimov.me","login":"NicholasAsimov","count":1},{"name":"Mo'men Elkhouli","email":"momen.elkhouli@proton.me","login":"momenashrafff","count":1},{"name":"yongxiu","email":"cuiyongxiu@gmail.com","login":"yongxiu","count":1},{"name":"tydra-wang","email":"wjunjie96@outlook.com","login":"tydra-wang","count":1},{"name":"tufstraka","email":"keithkadima@gmail.com","login":"tufstraka","count":1},{"name":"saso","email":"sasoakira6114@gmail.com","login":"otms61","count":1},{"name":"rui","email":"rui@meetup.com","login":"chenrui333","count":1},{"name":"pangsq","email":"pangsq9413@gmail.com","login":"pangsq","count":1},{"name":"ondrej-smola","email":"ondrej.smola@gmail.com","login":"ondrej-smola","count":1},{"name":"nandbhat","email":"70567261+nandbhat","login":"nandbhat","count":1},{"name":"miguelvalerio","email":"miguelgomes.valerio@gmail.com","login":"miguelvalerio","count":1},{"name":"michelpromonet","email":"michel.promonet@thalesgroup.com","login":"michelpromonet","count":1},{"name":"marwan9696","email":"57067080+marwan9696","login":"marwan9696","count":1},{"name":"kpcyrd","email":"git@rxv.cc","login":"kpcyrd","count":1},{"name":"john lee","email":"64lamei@gmail.com","login":"64johnlee","count":1},{"name":"jmakinen-ncc","email":"joshua.makinen@nccgroup.com","login":"jmakinen-ncc","count":1},{"name":"gregoireW","email":"24318548+GregoireW","login":"GregoireW","count":1},{"name":"ffgan","email":"sudoemt@gmail.com","login":"ffgan","count":1},{"name":"edwardthiele","email":"4979401+edwardthiele","login":"edwardthiele","count":1},{"name":"choo-stripe","email":"42820326+choo-stripe","login":"choo-stripe","count":1},{"name":"anish","email":"145943060+anishesg","login":"anishesg","count":1},{"name":"Yu YI","email":"yiyu@google.com","login":"erain","count":1},{"name":"Yonghe Zhao","email":"yonghe.zhao@yahoo.com","login":"zhaoyonghe","count":1},{"name":"Xiaohe Gong","email":"38306135+xiaohegong","login":"xiaohegong","count":1},{"name":"Vincent Latombe","email":"vincent@latombe.net","login":"Vlatombe","count":1},{"name":"Vinayak Mishra","email":"viks@vnykmshr.com","login":"vnykmshr","count":1},{"name":"Vadim Raskin","email":"raskinvadim@gmail.com","login":"vvraskin","count":1},{"name":"John Millikin","email":"jmillikin@stripe.com","login":"jmillikin-stripe","count":1},{"name":"Javier Romero","email":"root@jromero.codes","login":"jromero","count":1},{"name":"Jasper","email":"656460+jwhb","login":"jwhb","count":1},{"name":"Jamie Phillips","email":"cphill11@gmail.com","login":"phillipsj","count":1},{"name":"JUNYI LIU","email":"moss80199.cs05@nycu.edu.tw","login":"mosskappa","count":1},{"name":"Ingwon Song","email":"102102227+ingwonsong","login":"ingwonsong","count":1},{"name":"Ian Beringer","email":"ianberinger","login":"ianberinger","count":1},{"name":"Hubert Zhang","email":"hubert.zyk@gmail.com","login":"HubertZhang","count":1},{"name":"Herman","email":"hermanbanken@gmail.com","login":"hermanbanken","count":1},{"name":"Hassan Jasim","email":"hjasim@google.com","login":"HassanJasim","count":1},{"name":"Hasibul Hasan (Anik)","email":"25927971+AnikHasibul","login":"AnikHasibul","count":1},{"name":"Halvard Skogsrud","email":"halvard@google.com","login":"halvards","count":1},{"name":"Haihan Jiang","email":"haihanj99@gmail.com","login":"Haihan-Jiang","count":1},{"name":"Guzman","email":"guz@redhat.com","login":"guzalv","count":1},{"name":"Guilherme Rezende","email":"guilhermebr@gmail.com","login":"guilhermebr","count":1},{"name":"Gagan H R","email":"hrgagan4@gmail.com","login":"gaganhr94","count":1},{"name":"FGtatsuro","email":"204491+FGtatsuro","login":"FGtatsuro","count":1},{"name":"Evan Anderson","email":"evan.k.anderson@gmail.com","login":"evankanderson","count":1},{"name":"Erfan Besharat","email":"erbesharat@gmail.com","login":"erbesharat","count":1},{"name":"Eng Zer Jun","email":"engzerjun@gmail.com","login":"Juneezee","count":1},{"name":"E Casey","email":"ekcasey","login":"ekcasey","count":1},{"name":"Derek H.J Ray","email":"derek9ray@gmail.com","login":"derekhjray","count":1},{"name":"Denis Schelkunov","email":"eglookz","login":"eglookz","count":1},{"name":"David Gannon","email":"19214156+dgannon991","login":"dgannon991","count":1},{"name":"David Gageot","email":"david@gageot.net","login":"dgageot","count":1},{"name":"Mo Firouz","email":"mofirouz","login":"mofirouz","count":1},{"name":"MisterMX","email":"mbxd12@web.de","login":"MisterMX","count":1},{"name":"Milas Bowman","email":"milasb@gmail.com","login":"milas","count":1},{"name":"Michael Kriese","email":"michael.kriese@visualon.de","login":"viceice","count":1},{"name":"Micah Young","email":"micah.young@gmail.com","login":"micahyoung","count":1},{"name":"Meredith Lancaster","email":"malancas","login":"malancas","count":1},{"name":"Mayeu - Cast","email":"Mayeu","login":"Mayeu","count":1},{"name":"Max Wittig","email":"max.wittig@siemens.com","login":"max-wittig","count":1},{"name":"Matthieu MOREL","email":"mmorel-35","login":"mmorel-35","count":1},{"name":"Matthew Robertson","email":"matthewrobertson03@gmail.com","login":"matthewrobertson","count":1},{"name":"Mark Terrel","email":"mark@unbounded.systems","login":"mterrel","count":1},{"name":"Luke Wood","email":"luke@lwood.me.uk","login":"lw346","count":1},{"name":"Lindsay Smith","email":"lindsay.i.smith@gmail.com","login":"lindsayismith","count":1},{"name":"Lavrenti Frobeen","email":"lfrobeen@outlook.com","login":"LFrobeen","count":1},{"name":"Laitron","email":"meetlq@outlook.com","login":"Laitr0n","count":1},{"name":"Kyle Conroy","email":"kyle@conroy.org","login":"kyleconroy","count":1},{"name":"Kuba S","email":"skiepko@gmail.com","login":"kramarz","count":1},{"name":"Kevin Zhao","email":"kevin8093@126.com","login":"KevinZhao","count":1},{"name":"Justin Santa Barbara","email":"justinsb@google.com","login":"justinsb","count":1},{"name":"Joël Pepper","email":"pepper+github@bronze-deer.de","login":"BronzeDeer","count":1},{"name":"João Pereira","email":"joaopapereira@gmail.com","login":"joaopapereira","count":1},{"name":"Josh W Lewis","email":"josh.w.lewis@gmail.com","login":"joshwlewis","count":1},{"name":"Joseph Glanville","email":"jpg@jpg.id.au","login":"josephglanville","count":1},{"name":"Jose R. Gonzalez","email":"josegonzalez89@gmail.com","login":"komish","count":1},{"name":"Jongwoo Han","email":"jongwooo.han@gmail.com","login":"jongwooo","count":1},{"name":"Ben Moss","email":"moss.127@gmail.com","login":"benmoss","count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":32},{"name":"Jared","email":"jrsb@google.com","login":"Subserial","count":20},{"name":"Sebastiaan van Stijn","email":"thaJeztah","login":"thaJeztah","count":6},{"name":"Muhammad Ahsan Gill","email":"121255477+iahsanGill","login":"iahsanGill","count":5},{"name":"evilgensec","email":"evil.gen.sec@gmail.com","login":"evilgensec","count":5},{"name":"Ali Asghar","email":"98263017+alliasgher","login":"alliasgher","count":4},{"name":"Dayna Blackwell","email":"dayna@blackwell-systems.com","login":"blackwell-systems","count":3},{"name":"Gustavo Arantes","email":"dev.gustavoa@gmail.com","login":"gnix0","count":3},{"name":"Malte Poll","email":"1780588+malt3","login":"malt3","count":3},{"name":"Rohan Patnaik","email":"rohanpatnaik1997@gmail.com","login":"rohan-patnaik","count":3},{"name":"Martin Kibera","email":"105651142+jammie-jelly","login":"jammie-jelly","count":2},{"name":"Aaron Mark","email":"64331623+amarkdotdev","login":"amarkdotdev","count":1},{"name":"Adil Burak Şen","email":"56400880+adilburaksen","login":"adilburaksen","count":1},{"name":"Alex Lindeman","email":"139387+aelindeman","login":"aelindeman","count":1},{"name":"Brad Moylan","email":"bmoylan@palantir.com","login":"bmoylan","count":1},{"name":"Brandon Stoll","email":"bstoll","login":"bstoll","count":1},{"name":"Derek H.J Ray","email":"derek9ray@gmail.com","login":"derekhjray","count":1},{"name":"Gagan H R","email":"hrgagan4@gmail.com","login":"gaganhr94","count":1},{"name":"Guzman","email":"guz@redhat.com","login":"guzalv","count":1},{"name":"Haihan Jiang","email":"haihanj99@gmail.com","login":"Haihan-Jiang","count":1},{"name":"tufstraka","email":"keithkadima@gmail.com","login":"tufstraka","count":1},{"name":"nandbhat","email":"70567261+nandbhat","login":"nandbhat","count":1},{"name":"marwan9696","email":"57067080+marwan9696","login":"marwan9696","count":1},{"name":"john lee","email":"64lamei@gmail.com","login":"64johnlee","count":1},{"name":"ffgan","email":"sudoemt@gmail.com","login":"ffgan","count":1},{"name":"edwardthiele","email":"4979401+edwardthiele","login":"edwardthiele","count":1},{"name":"anish","email":"145943060+anishesg","login":"anishesg","count":1},{"name":"Zadkiel AHARONIAN","email":"hello@zadkiel.fr","login":"aslafy-z","count":1},{"name":"Vinayak Mishra","email":"viks@vnykmshr.com","login":"vnykmshr","count":1},{"name":"Titi Wangsa Damhore","email":"111611+twdamhore","login":"twdamhore","count":1},{"name":"Tim Ramlot","email":"42113979+inteon","login":"inteon","count":1},{"name":"Stephanie Wei","email":"72533858+Stephanie0829","login":"Stephanie0829","count":1},{"name":"Rafael F.","email":"r4f4rfs@gmail.com","login":"r4f4","count":1},{"name":"Paulo Gomes","email":"paulo.gomes.uk@gmail.com","login":"pjbgf","count":1},{"name":"Mo'men Elkhouli","email":"momen.elkhouli@proton.me","login":"momenashrafff","count":1},{"name":"Kevin Zhao","email":"kevin8093@126.com","login":"KevinZhao","count":1},{"name":"Jon Johnson","email":"jon.johnson@chainguard.dev","login":"jonjohnsonjr","count":1},{"name":"John Howard","email":"john.howard@solo.io","login":"howardjohn","count":1},{"name":"Jason Hall","email":"jason@chainguard.dev","login":"imjasonh","count":1},{"name":"JUNYI LIU","email":"moss80199.cs05@nycu.edu.tw","login":"mosskappa","count":1},{"name":"Hassan Jasim","email":"hjasim@google.com","login":"HassanJasim","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-07-23T00:00:22.250Z","repositories_count":6396780,"commits_count":871252691,"contributors_count":36102982,"owners_count":1231351,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"google/go-containerregistry","html_url":"https://github.com/google/go-containerregistry","last_synced_at":"2026-07-22T05:23:17.724Z","status":"active","issues_count":276,"pull_requests_count":652,"avg_time_to_close_issue":11472170.18,"avg_time_to_close_pull_request":6094944.23255814,"issues_closed_count":200,"pull_requests_closed_count":473,"pull_request_authors_count":181,"issue_authors_count":238,"avg_comments_per_issue":2.2355072463768115,"avg_comments_per_pull_request":1.8895705521472392,"merged_pull_requests_count":207,"bot_issues_count":1,"bot_pull_requests_count":198,"past_year_issues_count":41,"past_year_pull_requests_count":142,"past_year_avg_time_to_close_issue":3227393.6875,"past_year_avg_time_to_close_pull_request":1062461.621212121,"past_year_issues_closed_count":16,"past_year_pull_requests_closed_count":66,"past_year_pull_request_authors_count":55,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8292682926829268,"past_year_avg_comments_per_pull_request":1.443661971830986,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":40,"past_year_merged_pull_requests_count":47,"created_at":"2023-05-10T14:39:03.778Z","updated_at":"2026-07-22T05:23:17.724Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fgo-containerregistry/issues","issue_labels_count":{"table":{"bug":144,"lifecycle/stale":110,"question":72,"lifecycle/frozen":18,"good first issue":7,"help wanted":3,"dependencies":1,"github_actions":1,"enhancement":1,"go":1}},"pull_request_labels_count":{"table":{"dependencies":197,"lifecycle/stale":122,"github_actions":95,"go":80,"lifecycle/frozen":5}},"issue_author_associations_count":{"table":{"NONE":231,"CONTRIBUTOR":26,"COLLABORATOR":18,"MEMBER":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":349,"NONE":202,"COLLABORATOR":101}},"issue_authors":{"table":{"jonjohnsonjr":7,"imjasonh":5,"maxb":3,"lcarva":3,"thesayyn":3,"joaopapereira":2,"DmitriyLewen":2,"knqyf263":2,"picatz":2,"matthewfeickert":2,"astingengo":2,"amitz-jfrog":2,"ryanbrainard":2,"nvsmirnov":2,"phillebaba":2,"ktarplee":2,"rgl":2,"khareyash05":2,"slonopotamus":2,"RajeshMalla":2,"PuneetPunamiya":2,"AsafZalcman":2,"deitch":2,"Bjyothi2023":2,"mattmoor":2,"Mukuls77":2,"aceeric":2,"dependabot[bot]":1,"kipz":1,"briankurilko":1,"davinkevin":1,"dudicoco":1,"hkadakia":1,"lindeskar":1,"abhishekmahajan0709222":1,"tculp":1,"wwchen21227":1,"Endevir":1,"politas180":1,"SuperSandro2000":1,"1seal":1,"IceCodeNew":1,"sh-at-cs":1,"sflanker":1,"Hritik14":1,"Stephanie0829":1,"abitrolly":1,"svvac":1,"mrozanc":1,"somtochiama":1,"haarchri":1,"laozc":1,"mafredri":1,"mvasl":1,"anithapriyanatarajan":1,"Federico1976":1,"jaythamke":1,"kapilt":1,"nianyush":1,"Mo0rBy":1,"underscorejoser":1,"moraneus":1,"nheimlich":1,"chizhg":1,"nivbend":1,"scodeman":1,"iuadastra":1,"dgageot":1,"WanzenBug":1,"matejvasek":1,"heliza-42":1,"spencerschrock":1,"mager700":1,"Jk1484":1,"jongwooo":1,"sudo-bmitch":1,"aaronclong":1,"pstoeckle":1,"vito":1,"WestleyK":1,"maxswjeon":1,"rj-vinodh":1,"stgrace":1,"xuxiaowei-com-cn":1,"dgannon991":1,"dmitris":1,"andreas-mucha":1,"FrancisQuaisr":1,"Rro0806":1,"smira":1,"kumarkeshav021":1,"bluec0re":1,"baydakov-tn":1,"jabrown85":1,"rd-niklas-gergs":1,"rafibarash":1,"gvolpe":1,"nandbhat":1,"hugoShaka":1,"stevehipwell":1,"cbf123":1,"sudheermygapula":1,"ebizboy":1,"spoonysnail":1,"bmoylan":1,"mxmeinhold":1,"jacobosborne1":1,"kuwv":1,"vvavad":1,"masarlabs":1,"Llois41":1,"bartoszpop":1,"jianhu":1,"joshwlewis":1,"arbll":1,"sjhx":1,"svaiyapu":1,"joemiller":1,"chappjc":1,"tri-adam":1,"pvillaverde":1,"Silvanoc":1,"lqb":1,"matthew-muscat":1,"geekflyer":1,"maximilianbraun":1,"abo-abo":1,"makkes":1,"Shahdee1337":1,"parvathikp100":1,"Vishal-Chdhry":1,"justinreddick":1,"kovkev":1,"ludfjig":1,"Elara6331":1,"tgoodsell-tempus":1,"codingben":1,"RaulWCosta":1,"malancas":1,"PatrickSpies":1,"mdepa":1,"rally-dimi":1,"Danielku15":1,"ibuildthecloud":1,"reddaly":1,"xin3liang":1,"otms61":1,"ltsar-federated":1,"dosilyoun":1,"splucs":1,"zhaohuabing":1,"MatiasFrank":1,"ImBIOS":1,"frezbo":1,"antonvdl":1,"phong2tran":1,"cgamache":1,"kyleliu2020":1,"hxia043":1,"khrisrichardson":1,"cormacrelf":1,"hunshcn":1,"atheri":1,"bangiopicher2":1,"paralika":1,"Tjomas":1,"mark0-cn":1,"qwertroot12345":1,"mamachanko":1,"halamix2":1,"tzahari":1,"tomerse-sg":1,"Aerius42":1,"sandeepsisodiya-hpe":1,"panteparak":1,"nmiyake":1,"AustinAbro321":1,"WikiHkz":1,"gabs79":1,"VenutNSA":1,"a-h":1,"jastBytes":1,"DarwinJS":1,"adrian-thurston":1,"getsueineko":1,"hasheddan":1,"developer-guy":1,"naterichman":1,"jordan-da":1,"kostola":1,"iFrozenPhoenix":1,"vGhost2000":1,"bluesentinelsec":1,"phisco":1,"matthewrobertson":1,"ravinjhajharia":1,"nekr0z":1,"alexey-igrychev":1,"joaodrp":1,"Iredalemelanie":1,"rgrzesk":1,"nickstenning":1,"andrew-su":1,"kimdu0":1,"lbuttorff":1,"harrypunk":1,"tuananh":1,"fxdgear":1,"bthuilot":1,"gkoritnik":1,"Sergey-Zorin":1,"seternate":1,"bcrochet":1,"yoks":1,"GabriFedi97":1,"warrenhodg":1,"evgenymo":1,"EronWright":1,"fkuhnert":1,"Fricounet":1,"cedricvanrompay-datadog":1,"einheber-seed":1,"dtrudg":1,"wc9384":1,"JLLeitschuh":1,"IAreKyleW00t":1,"SanadhyaLakshya":1,"njhale":1,"adityavenneti":1,"chigurupatip":1,"biswalc":1,"aelindeman":1,"zirain":1,"Kushank24":1,"Subserial":1,"bartvollebregt":1,"chyashi":1,"Tommyf":1}},"pull_request_authors":{"table":{"dependabot[bot]":190,"jonjohnsonjr":57,"imjasonh":41,"Subserial":21,"bmoylan":12,"Haihan-Jiang":11,"thesayyn":8,"github-actions[bot]":8,"testwill":7,"derekhjray":6,"mattmoor":6,"malt3":5,"iahsanGill":5,"abitrolly":5,"wlynch":5,"evilgensec":5,"developer-guy":4,"thaJeztah":4,"alliasgher":4,"jsoref":4,"aslafy-z":3,"ktarplee":3,"rohan-patnaik":3,"nmiyake":3,"bartoszpop":3,"A2uria":2,"reddaly":2,"morlay":2,"ameir":2,"JefferyQ7":2,"ludfjig":2,"AustinAbro321":2,"sttor":2,"GregoireW":2,"hunshcn":2,"Jasper-Ben":2,"maxarndt":2,"kylecarbs":2,"dgannon991":2,"hotkeyprince":2,"richardoriginal":2,"laluka":2,"zhaoyonghe":2,"nheimlich":2,"1seal":2,"aw185176":2,"dmitris":2,"stgrace":2,"Silvanoc":2,"ilopezluna":2,"BobDu":2,"matejvasek":2,"2opremio":2,"lindhe":2,"jordan-da":2,"jdolitsky":2,"sherine-k":2,"seternate":2,"taeold":2,"tlaverdure":2,"codingben":2,"sfc-gh-ptabor":2,"alecmerdler":2,"njucjc":2,"m-messiah":2,"nmcostello":2,"zchee":2,"joshwlewis":2,"kipz":2,"luxurine":2,"nikpivkin":2,"klemmari1":2,"gzm0":2,"amarkdotdev":2,"cpanato":2,"dereknola":2,"aler9":2,"Eun":2,"bduffany":2,"malancas":2,"justinsb":2,"nivbend":2,"zregvart":2,"helsaawy":2,"badstreff":2,"SaschaSchwarze0":2,"AndrewCharlesHay":2,"hod-alpert":2,"GabriFedi97":2,"blackwell-systems":2,"ericsmalling":2,"dirkmueller":2,"arpitjain099":2,"HubertZhang":2,"mrozanc":2,"deitch":2,"natalieparellano":2,"luhring":2,"AdamKorcz":1,"kostola":1,"caxu-rh":1,"vnykmshr":1,"splucs":1,"gnix0":1,"nandbhat":1,"MrINVISO":1,"howardjohn":1,"aelindeman":1,"SolsticeSpectrum":1,"ryanbrainard":1,"edwardthiele":1,"kyleconroy":1,"x64vps":1,"sadmanf":1,"pangsq":1,"xuxiaowei-com-cn":1,"mosskappa":1,"kevinmdavis":1,"tianon":1,"matthyx":1,"maisem":1,"mmorel-35":1,"jphelton":1,"smoser":1,"raushanksec":1,"Stephanie0829":1,"tuananh":1,"caarlos0":1,"prb112":1,"AlexJohnWilcox":1,"ehmm":1,"dolohow":1,"vsoch":1,"Nick-Bug-Bounty-Hunter":1,"sambhav":1,"cjc7373":1,"knQzx":1,"bstoll":1,"Laitr0n":1,"ashpect":1,"64johnlee":1,"adilburaksen":1,"tufstraka":1,"LFrobeen":1,"otms61":1,"Yanhu007":1,"lcarva":1,"sumkincpp":1,"zhangguanzhang":1,"jongwooo":1,"ericcurtin":1,"ajayk":1,"momenashrafff":1,"knative-automation":1,"scothis":1,"aaron-prindle":1,"DennisDenuto":1,"yiftizur":1,"slonopotamus":1,"gaganhr94":1,"mamachanko":1,"laozc":1,"ReillyBrogan":1,"knqyf263":1,"cjellick":1,"rj-vinodh":1,"dprotaso":1,"josephglanville":1,"jotadrilo":1,"guzalv":1,"amitzig":1,"tamalsaha":1,"mattmoor-sockpuppet":1,"anishesg":1,"0x5A6I":1,"lingdie":1,"HassanJasim":1,"dnwe":1,"phisco":1,"KevinZhao":1,"clrprod":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-07-23T00:00:22.028Z","repositories_count":14857928,"issues_count":31971038,"pull_requests_count":105207167,"authors_count":11356455,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"bug":21,"question":2}},"past_year_pull_request_labels_count":{"table":{"dependencies":40,"go":22,"github_actions":18}},"past_year_issue_author_associations_count":{"table":{"NONE":39,"CONTRIBUTOR":2}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":103,"NONE":38,"COLLABORATOR":1}},"past_year_issue_authors":{"table":{"maxb":3,"amitz-jfrog":2,"ryanbrainard":2,"nvsmirnov":2,"1seal":1,"JLLeitschuh":1,"kimdu0":1,"Llois41":1,"lqb":1,"moraneus":1,"nandbhat":1,"nianyush":1,"politas180":1,"sh-at-cs":1,"sjhx":1,"tzahari":1,"underscorejoser":1,"wc9384":1,"xuxiaowei-com-cn":1,"adrian-thurston":1,"aelindeman":1,"andreas-mucha":1,"bartvollebregt":1,"bluec0re":1,"briankurilko":1,"bthuilot":1,"chappjc":1,"dtrudg":1,"ebizboy":1,"Elara6331":1,"Endevir":1,"EronWright":1,"Federico1976":1,"FrancisQuaisr":1,"frezbo":1,"Fricounet":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":40,"Haihan-Jiang":11,"Subserial":8,"derekhjray":6,"iahsanGill":5,"malt3":5,"evilgensec":5,"alliasgher":4,"thaJeztah":4,"rohan-patnaik":3,"ericsmalling":2,"BobDu":2,"blackwell-systems":2,"arpitjain099":2,"1seal":2,"amarkdotdev":2,"64johnlee":1,"KevinZhao":1,"knQzx":1,"lingdie":1,"yiftizur":1,"momenashrafff":1,"Yanhu007":1,"mosskappa":1,"MrINVISO":1,"nandbhat":1,"xuxiaowei-com-cn":1,"x64vps":1,"Nick-Bug-Bounty-Hunter":1,"ryanbrainard":1,"vnykmshr":1,"tufstraka":1,"sadmanf":1,"SolsticeSpectrum":1,"adilburaksen":1,"aelindeman":1,"AlexJohnWilcox":1,"amitzig":1,"anishesg":1,"bmoylan":1,"bstoll":1,"caxu-rh":1,"cjc7373":1,"dolohow":1,"edwardthiele":1,"ericcurtin":1,"gaganhr94":1,"gnix0":1,"guzalv":1,"HassanJasim":1,"howardjohn":1,"imjasonh":1,"jonjohnsonjr":1,"jphelton":1,"kevinmdavis":1}},"maintainers":[{"table":{"login":"jonjohnsonjr","count":64,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"}},{"table":{"login":"imjasonh","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/imjasonh"}},{"table":{"login":"thesayyn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thesayyn"}},{"table":{"login":"mattmoor","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattmoor"}},{"table":{"login":"deitch","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/deitch"}},{"table":{"login":"chizhg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chizhg"}}],"active_maintainers":[{"table":{"login":"jonjohnsonjr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonjohnsonjr"}}]}},"events":{"total":{"ReleaseEvent":8,"DeleteEvent":47,"PullRequestEvent":202,"ForkEvent":49,"IssuesEvent":60,"WatchEvent":432,"IssueCommentEvent":286,"PushEvent":124,"PullRequestReviewCommentEvent":26,"PullRequestReviewEvent":66,"CreateEvent":48},"last_year":{"ReleaseEvent":2,"DeleteEvent":26,"PullRequestEvent":90,"ForkEvent":14,"IssuesEvent":8,"WatchEvent":150,"IssueCommentEvent":73,"PushEvent":75,"PullRequestReviewEvent":36,"PullRequestReviewCommentEvent":13,"CreateEvent":24}},"keywords":["container","container-registry","docker","registry"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/analyze.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:49.974Z","updated_at":"2023-10-03T11:42:49.974Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/analyze.yaml","dependencies":[{"id":14080104669,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080104670,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":14080104671,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":14080104672,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/boilerplate.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.026Z","updated_at":"2023-10-03T11:42:50.026Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/boilerplate.yaml","dependencies":[{"id":14080104679,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080104680,"package_name":"chainguard-dev/actions/boilerplate","ecosystem":"actions","requirements":"5e21cb47971231c078a677dfe89a348371cb880c","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/build.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.118Z","updated_at":"2023-10-03T11:42:50.118Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/build.yaml","dependencies":[{"id":14080104779,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080104782,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/bump-deps.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.170Z","updated_at":"2023-10-03T11:42:50.170Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/bump-deps.yaml","dependencies":[{"id":14080104819,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080104820,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":14080104821,"package_name":"peter-evans/create-pull-request","ecosystem":"actions","requirements":"v5","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/donotsubmit.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.237Z","updated_at":"2023-10-03T11:42:50.237Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/donotsubmit.yaml","dependencies":[{"id":14080105004,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105005,"package_name":"chainguard-dev/actions/donotsubmit","ecosystem":"actions","requirements":"5e21cb47971231c078a677dfe89a348371cb880c","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/e2e.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.277Z","updated_at":"2023-10-03T11:42:50.277Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/e2e.yaml","dependencies":[{"id":14080105047,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105048,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ecr-auth.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.301Z","updated_at":"2023-10-03T11:42:50.301Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/ecr-auth.yaml","dependencies":[{"id":14080105051,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105053,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":14080105054,"package_name":"aws-actions/configure-aws-credentials","ecosystem":"actions","requirements":"v2.0.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ghcr-auth.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.375Z","updated_at":"2023-10-03T11:42:50.375Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/ghcr-auth.yaml","dependencies":[{"id":14080105419,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105422,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/presubmit.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.411Z","updated_at":"2023-10-03T11:42:50.411Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/presubmit.yaml","dependencies":[{"id":14080105450,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105451,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release.yml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.475Z","updated_at":"2023-10-03T11:42:50.475Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/release.yml","dependencies":[{"id":14080105519,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105520,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":14080105521,"package_name":"goreleaser/goreleaser-action","ecosystem":"actions","requirements":"v4.2.0","direct":true,"kind":"composite","optional":false},{"id":14080105522,"package_name":"slsa-framework/slsa-verifier/actions/installer","ecosystem":"actions","requirements":"v2.2.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/stale.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.570Z","updated_at":"2023-10-03T11:42:50.570Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/stale.yaml","dependencies":[{"id":14080105544,"package_name":"actions/stale","ecosystem":"actions","requirements":"v8","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/style.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.639Z","updated_at":"2023-10-03T11:42:50.639Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/style.yaml","dependencies":[{"id":14080105630,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":14080105633,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105636,"package_name":"chainguard-dev/actions/goimports","ecosystem":"actions","requirements":"5e21cb47971231c078a677dfe89a348371cb880c","direct":true,"kind":"composite","optional":false},{"id":14080105638,"package_name":"golangci/golangci-lint-action","ecosystem":"actions","requirements":"v3.4.0","direct":true,"kind":"composite","optional":false},{"id":14080105641,"package_name":"reviewdog/action-misspell","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":14080105644,"package_name":"chainguard-dev/actions/trailing-space","ecosystem":"actions","requirements":"5e21cb47971231c078a677dfe89a348371cb880c","direct":true,"kind":"composite","optional":false},{"id":14080105838,"package_name":"chainguard-dev/actions/eof-newline","ecosystem":"actions","requirements":"5e21cb47971231c078a677dfe89a348371cb880c","direct":true,"kind":"composite","optional":false},{"id":14080105839,"package_name":"get-woke/woke-action-reviewdog","ecosystem":"actions","requirements":"v0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/test.yaml","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.862Z","updated_at":"2023-10-03T11:42:50.862Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/.github/workflows/test.yaml","dependencies":[{"id":14080105926,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14080105927,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":14080105928,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v3.1.4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"go","filepath":"cmd/krane/go.mod","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:50.920Z","updated_at":"2023-10-03T11:42:50.920Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/cmd/krane/go.mod","dependencies":[{"id":14080105972,"package_name":"github.com/awslabs/amazon-ecr-credential-helper/ecr-login","ecosystem":"go","requirements":"v0.0.0-20230510185313-f5e39e5f34c7","direct":true,"kind":"runtime","optional":false},{"id":14080105973,"package_name":"github.com/chrismellard/docker-credential-acr-env","ecosystem":"go","requirements":"v0.0.0-20230304212654-82a0ddb27589","direct":true,"kind":"runtime","optional":false},{"id":14080105974,"package_name":"github.com/google/go-containerregistry","ecosystem":"go","requirements":"v0.15.2","direct":true,"kind":"runtime","optional":false},{"id":14080105975,"package_name":"cloud.google.com/go/compute","ecosystem":"go","requirements":"v1.19.3","direct":true,"kind":"runtime","optional":false},{"id":14080105976,"package_name":"cloud.google.com/go/compute/metadata","ecosystem":"go","requirements":"v0.2.3","direct":true,"kind":"runtime","optional":false},{"id":14080105977,"package_name":"github.com/Azure/azure-sdk-for-go","ecosystem":"go","requirements":"v68.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080105978,"package_name":"github.com/Azure/go-autorest","ecosystem":"go","requirements":"v14.2.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080105979,"package_name":"github.com/Azure/go-autorest/autorest","ecosystem":"go","requirements":"v0.11.29","direct":true,"kind":"runtime","optional":false},{"id":14080105980,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.23","direct":true,"kind":"runtime","optional":false},{"id":14080105981,"package_name":"github.com/Azure/go-autorest/autorest/azure/auth","ecosystem":"go","requirements":"v0.5.12","direct":true,"kind":"runtime","optional":false},{"id":14080105982,"package_name":"github.com/Azure/go-autorest/autorest/azure/cli","ecosystem":"go","requirements":"v0.4.6","direct":true,"kind":"runtime","optional":false},{"id":14080105983,"package_name":"github.com/Azure/go-autorest/autorest/date","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":14080105984,"package_name":"github.com/Azure/go-autorest/logger","ecosystem":"go","requirements":"v0.2.1","direct":true,"kind":"runtime","optional":false},{"id":14080105985,"package_name":"github.com/Azure/go-autorest/tracing","ecosystem":"go","requirements":"v0.6.0","direct":true,"kind":"runtime","optional":false},{"id":14080105986,"package_name":"github.com/aws/aws-sdk-go-v2","ecosystem":"go","requirements":"v1.18.0","direct":true,"kind":"runtime","optional":false},{"id":14080105987,"package_name":"github.com/aws/aws-sdk-go-v2/config","ecosystem":"go","requirements":"v1.18.25","direct":true,"kind":"runtime","optional":false},{"id":14080105988,"package_name":"github.com/aws/aws-sdk-go-v2/credentials","ecosystem":"go","requirements":"v1.13.24","direct":true,"kind":"runtime","optional":false},{"id":14080105989,"package_name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","ecosystem":"go","requirements":"v1.13.3","direct":true,"kind":"runtime","optional":false},{"id":14080105990,"package_name":"github.com/aws/aws-sdk-go-v2/internal/configsources","ecosystem":"go","requirements":"v1.1.33","direct":true,"kind":"runtime","optional":false},{"id":14080105991,"package_name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","ecosystem":"go","requirements":"v2.4.27","direct":true,"kind":"runtime","optional":false},{"id":14080105992,"package_name":"github.com/aws/aws-sdk-go-v2/internal/ini","ecosystem":"go","requirements":"v1.3.34","direct":true,"kind":"runtime","optional":false},{"id":14080105993,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecr","ecosystem":"go","requirements":"v1.18.11","direct":true,"kind":"runtime","optional":false},{"id":14080105994,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecrpublic","ecosystem":"go","requirements":"v1.16.2","direct":true,"kind":"runtime","optional":false},{"id":14080105995,"package_name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","ecosystem":"go","requirements":"v1.9.27","direct":true,"kind":"runtime","optional":false},{"id":14080105996,"package_name":"github.com/aws/aws-sdk-go-v2/service/sso","ecosystem":"go","requirements":"v1.12.10","direct":true,"kind":"runtime","optional":false},{"id":14080105997,"package_name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","ecosystem":"go","requirements":"v1.14.10","direct":true,"kind":"runtime","optional":false},{"id":14080105998,"package_name":"github.com/aws/aws-sdk-go-v2/service/sts","ecosystem":"go","requirements":"v1.19.0","direct":true,"kind":"runtime","optional":false},{"id":14080105999,"package_name":"github.com/aws/smithy-go","ecosystem":"go","requirements":"v1.13.5","direct":true,"kind":"runtime","optional":false},{"id":14080106000,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":true,"kind":"runtime","optional":false},{"id":14080106001,"package_name":"github.com/dimchansky/utfbom","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":14080106002,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106003,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106004,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106005,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":14080106006,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.5.0","direct":true,"kind":"runtime","optional":false},{"id":14080106007,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":true,"kind":"runtime","optional":false},{"id":14080106008,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":true,"kind":"runtime","optional":false},{"id":14080106009,"package_name":"github.com/inconshreveable/mousetrap","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080106010,"package_name":"github.com/jmespath/go-jmespath","ecosystem":"go","requirements":"v0.4.0","direct":true,"kind":"runtime","optional":false},{"id":14080106011,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":true,"kind":"runtime","optional":false},{"id":14080106012,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080106013,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":14080106014,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":true,"kind":"runtime","optional":false},{"id":14080106015,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106016,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106017,"package_name":"github.com/spf13/cobra","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":14080106018,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":true,"kind":"runtime","optional":false},{"id":14080106019,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":true,"kind":"runtime","optional":false},{"id":14080106020,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.9.0","direct":true,"kind":"runtime","optional":false},{"id":14080106021,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":true,"kind":"runtime","optional":false},{"id":14080106022,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080106023,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":14080106024,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080106025,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":true,"kind":"runtime","optional":false},{"id":14080106026,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":true,"kind":"runtime","optional":false},{"id":14080106027,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.1.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"cmd/krane/go.sum","sha":null,"kind":"lockfile","created_at":"2023-10-03T11:42:51.024Z","updated_at":"2023-10-03T11:42:51.024Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/cmd/krane/go.sum","dependencies":[{"id":14080106073,"package_name":"cloud.google.com/go/compute","ecosystem":"go","requirements":"v1.19.3","direct":false,"kind":"runtime","optional":false},{"id":14080106074,"package_name":"cloud.google.com/go/compute/metadata","ecosystem":"go","requirements":"v0.2.3","direct":false,"kind":"runtime","optional":false},{"id":14080106075,"package_name":"github.com/Azure/azure-sdk-for-go","ecosystem":"go","requirements":"v68.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106076,"package_name":"github.com/Azure/go-autorest","ecosystem":"go","requirements":"v14.2.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106077,"package_name":"github.com/Azure/go-autorest/autorest","ecosystem":"go","requirements":"v0.11.24","direct":false,"kind":"runtime","optional":false},{"id":14080106078,"package_name":"github.com/Azure/go-autorest/autorest","ecosystem":"go","requirements":"v0.11.29","direct":false,"kind":"runtime","optional":false},{"id":14080106079,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.18","direct":false,"kind":"runtime","optional":false},{"id":14080106080,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.22","direct":false,"kind":"runtime","optional":false},{"id":14080106081,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.23","direct":false,"kind":"runtime","optional":false},{"id":14080106082,"package_name":"github.com/Azure/go-autorest/autorest/azure/auth","ecosystem":"go","requirements":"v0.5.12","direct":false,"kind":"runtime","optional":false},{"id":14080106083,"package_name":"github.com/Azure/go-autorest/autorest/azure/cli","ecosystem":"go","requirements":"v0.4.5","direct":false,"kind":"runtime","optional":false},{"id":14080106084,"package_name":"github.com/Azure/go-autorest/autorest/azure/cli","ecosystem":"go","requirements":"v0.4.6","direct":false,"kind":"runtime","optional":false},{"id":14080106085,"package_name":"github.com/Azure/go-autorest/autorest/date","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106086,"package_name":"github.com/Azure/go-autorest/autorest/mocks","ecosystem":"go","requirements":"v0.4.1","direct":false,"kind":"runtime","optional":false},{"id":14080106087,"package_name":"github.com/Azure/go-autorest/autorest/mocks","ecosystem":"go","requirements":"v0.4.2","direct":false,"kind":"runtime","optional":false},{"id":14080106088,"package_name":"github.com/Azure/go-autorest/logger","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106089,"package_name":"github.com/Azure/go-autorest/tracing","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":14080106090,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106091,"package_name":"github.com/aws/aws-sdk-go-v2","ecosystem":"go","requirements":"v1.18.0","direct":false,"kind":"runtime","optional":false},{"id":14080106092,"package_name":"github.com/aws/aws-sdk-go-v2/config","ecosystem":"go","requirements":"v1.18.25","direct":false,"kind":"runtime","optional":false},{"id":14080106093,"package_name":"github.com/aws/aws-sdk-go-v2/credentials","ecosystem":"go","requirements":"v1.13.24","direct":false,"kind":"runtime","optional":false},{"id":14080106094,"package_name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","ecosystem":"go","requirements":"v1.13.3","direct":false,"kind":"runtime","optional":false},{"id":14080106095,"package_name":"github.com/aws/aws-sdk-go-v2/internal/configsources","ecosystem":"go","requirements":"v1.1.33","direct":false,"kind":"runtime","optional":false},{"id":14080106096,"package_name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","ecosystem":"go","requirements":"v2.4.27","direct":false,"kind":"runtime","optional":false},{"id":14080106097,"package_name":"github.com/aws/aws-sdk-go-v2/internal/ini","ecosystem":"go","requirements":"v1.3.34","direct":false,"kind":"runtime","optional":false},{"id":14080106098,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecr","ecosystem":"go","requirements":"v1.18.11","direct":false,"kind":"runtime","optional":false},{"id":14080106099,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecrpublic","ecosystem":"go","requirements":"v1.16.2","direct":false,"kind":"runtime","optional":false},{"id":14080106100,"package_name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","ecosystem":"go","requirements":"v1.9.27","direct":false,"kind":"runtime","optional":false},{"id":14080106101,"package_name":"github.com/aws/aws-sdk-go-v2/service/sso","ecosystem":"go","requirements":"v1.12.10","direct":false,"kind":"runtime","optional":false},{"id":14080106102,"package_name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","ecosystem":"go","requirements":"v1.14.10","direct":false,"kind":"runtime","optional":false},{"id":14080106103,"package_name":"github.com/aws/aws-sdk-go-v2/service/sts","ecosystem":"go","requirements":"v1.19.0","direct":false,"kind":"runtime","optional":false},{"id":14080106104,"package_name":"github.com/aws/smithy-go","ecosystem":"go","requirements":"v1.13.5","direct":false,"kind":"runtime","optional":false},{"id":14080106105,"package_name":"github.com/awslabs/amazon-ecr-credential-helper/ecr-login","ecosystem":"go","requirements":"v0.0.0-20230510185313-f5e39e5f34c7","direct":false,"kind":"runtime","optional":false},{"id":14080106106,"package_name":"github.com/chrismellard/docker-credential-acr-env","ecosystem":"go","requirements":"v0.0.0-20230304212654-82a0ddb27589","direct":false,"kind":"runtime","optional":false},{"id":14080106107,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":false,"kind":"runtime","optional":false},{"id":14080106108,"package_name":"github.com/cpuguy83/go-md2man/v2","ecosystem":"go","requirements":"v2.0.2","direct":false,"kind":"runtime","optional":false},{"id":14080106109,"package_name":"github.com/danieljoos/wincred","ecosystem":"go","requirements":"v1.1.2","direct":false,"kind":"runtime","optional":false},{"id":14080106110,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106111,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106112,"package_name":"github.com/dimchansky/utfbom","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106113,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106114,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106115,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106116,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106117,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106118,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106119,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106120,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080106121,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106122,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":false,"kind":"runtime","optional":false},{"id":14080106123,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":14080106124,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.8","direct":false,"kind":"runtime","optional":false},{"id":14080106125,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":14080106126,"package_name":"github.com/inconshreveable/mousetrap","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106127,"package_name":"github.com/jmespath/go-jmespath","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106128,"package_name":"github.com/jmespath/go-jmespath/internal/testify","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":14080106129,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":false,"kind":"runtime","optional":false},{"id":14080106130,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106131,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106132,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":false,"kind":"runtime","optional":false},{"id":14080106133,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106134,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106135,"package_name":"github.com/russross/blackfriday/v2","ecosystem":"go","requirements":"v2.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106136,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080106137,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106138,"package_name":"github.com/spf13/cobra","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106139,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.3","direct":false,"kind":"runtime","optional":false},{"id":14080106140,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":false,"kind":"runtime","optional":false},{"id":14080106141,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106142,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106143,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106144,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106145,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":false,"kind":"runtime","optional":false},{"id":14080106146,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106147,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.1","direct":false,"kind":"runtime","optional":false},{"id":14080106148,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.2","direct":false,"kind":"runtime","optional":false},{"id":14080106149,"package_name":"github.com/urfave/cli","ecosystem":"go","requirements":"v1.22.12","direct":false,"kind":"runtime","optional":false},{"id":14080106150,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":false,"kind":"runtime","optional":false},{"id":14080106151,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106152,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.4.13","direct":false,"kind":"runtime","optional":false},{"id":14080106153,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190308221718-c2843e01d9a2","direct":false,"kind":"runtime","optional":false},{"id":14080106154,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20191011191535-87dc89f01550","direct":false,"kind":"runtime","optional":false},{"id":14080106155,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20200622213623-75b288015ac9","direct":false,"kind":"runtime","optional":false},{"id":14080106156,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20210921155107-089bfa567519","direct":false,"kind":"runtime","optional":false},{"id":14080106157,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20211215153901-e495a2d5b3d3","direct":false,"kind":"runtime","optional":false},{"id":14080106158,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20220722155217-630584e8d5aa","direct":false,"kind":"runtime","optional":false},{"id":14080106159,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":14080106160,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080106161,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106162,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.6.0-dev.0.20220419223038-86c51ed26bb4","direct":false,"kind":"runtime","optional":false},{"id":14080106163,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080106164,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190404232315-eb5bcb51f2a3","direct":false,"kind":"runtime","optional":false},{"id":14080106165,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190603091049-60506f45cf65","direct":false,"kind":"runtime","optional":false},{"id":14080106166,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190620200207-3b0461eec859","direct":false,"kind":"runtime","optional":false},{"id":14080106167,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201021035429-f5854403a974","direct":false,"kind":"runtime","optional":false},{"id":14080106168,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210226172049-e18ecbb05110","direct":false,"kind":"runtime","optional":false},{"id":14080106169,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20211112202133-69e39bad7dc2","direct":false,"kind":"runtime","optional":false},{"id":14080106170,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20220722155237-a158d28d115b","direct":false,"kind":"runtime","optional":false},{"id":14080106171,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":14080106172,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080106173,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106174,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190423024810-112230192c58","direct":false,"kind":"runtime","optional":false},{"id":14080106175,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20201020160332-67f06af15bc9","direct":false,"kind":"runtime","optional":false},{"id":14080106176,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20220722155255-886fb9371eb4","direct":false,"kind":"runtime","optional":false},{"id":14080106177,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106178,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190215142949-d0b11bdaac8a","direct":false,"kind":"runtime","optional":false},{"id":14080106179,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190412213103-97732733099d","direct":false,"kind":"runtime","optional":false},{"id":14080106180,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200930185726-fdedc70b468f","direct":false,"kind":"runtime","optional":false},{"id":14080106181,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20201119102817-f84b799fce68","direct":false,"kind":"runtime","optional":false},{"id":14080106182,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210119212857-b64e53b001e4","direct":false,"kind":"runtime","optional":false},{"id":14080106183,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210423082822-04245dca01da","direct":false,"kind":"runtime","optional":false},{"id":14080106184,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210615035016-665e8c7367d1","direct":false,"kind":"runtime","optional":false},{"id":14080106185,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210819135213-f52c844e1c1c","direct":false,"kind":"runtime","optional":false},{"id":14080106186,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220520151302-bc2c85ada10a","direct":false,"kind":"runtime","optional":false},{"id":14080106187,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220715151400-c0bba94af5f8","direct":false,"kind":"runtime","optional":false},{"id":14080106188,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220722155257-8c9f86f7a55f","direct":false,"kind":"runtime","optional":false},{"id":14080106189,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220825204002-c680a09ffe64","direct":false,"kind":"runtime","optional":false},{"id":14080106190,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220906165534-d0df966e6959","direct":false,"kind":"runtime","optional":false},{"id":14080106191,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106192,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106193,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20201126162022-7de9c90e9dd1","direct":false,"kind":"runtime","optional":false},{"id":14080106194,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20210927222741-03fcf44c2211","direct":false,"kind":"runtime","optional":false},{"id":14080106195,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106196,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106197,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080106198,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.3","direct":false,"kind":"runtime","optional":false},{"id":14080106199,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.6","direct":false,"kind":"runtime","optional":false},{"id":14080106200,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.7","direct":false,"kind":"runtime","optional":false},{"id":14080106201,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106202,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20180917221912-90fa682c2a6e","direct":false,"kind":"runtime","optional":false},{"id":14080106203,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191119224855-298f0cb1881e","direct":false,"kind":"runtime","optional":false},{"id":14080106204,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106205,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.12","direct":false,"kind":"runtime","optional":false},{"id":14080106206,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106207,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20190717185122-a985d3407aa7","direct":false,"kind":"runtime","optional":false},{"id":14080106208,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191011141410-1b5146add898","direct":false,"kind":"runtime","optional":false},{"id":14080106209,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":14080106210,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20200804184101-5ec99f83aff1","direct":false,"kind":"runtime","optional":false},{"id":14080106211,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":false,"kind":"runtime","optional":false},{"id":14080106212,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":14080106213,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":14080106214,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":false,"kind":"runtime","optional":false},{"id":14080106215,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":14080106216,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.8","direct":false,"kind":"runtime","optional":false},{"id":14080106217,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106218,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false},{"id":14080106219,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":false,"kind":"runtime","optional":false},{"id":14080106220,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.1.0","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:51.163Z","updated_at":"2023-10-03T11:42:51.163Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/go.mod","dependencies":[{"id":14080106230,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":true,"kind":"runtime","optional":false},{"id":14080106231,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106232,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106233,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106234,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":true,"kind":"runtime","optional":false},{"id":14080106235,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":true,"kind":"runtime","optional":false},{"id":14080106236,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080106237,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":14080106238,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":true,"kind":"runtime","optional":false},{"id":14080106239,"package_name":"github.com/spf13/cobra","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":14080106240,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080106241,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":14080106242,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106243,"package_name":"cloud.google.com/go/compute","ecosystem":"go","requirements":"v1.19.3","direct":true,"kind":"runtime","optional":false},{"id":14080106244,"package_name":"cloud.google.com/go/compute/metadata","ecosystem":"go","requirements":"v0.2.3","direct":true,"kind":"runtime","optional":false},{"id":14080106245,"package_name":"github.com/Microsoft/go-winio","ecosystem":"go","requirements":"v0.6.1","direct":true,"kind":"runtime","optional":false},{"id":14080106246,"package_name":"github.com/cpuguy83/go-md2man/v2","ecosystem":"go","requirements":"v2.0.2","direct":true,"kind":"runtime","optional":false},{"id":14080106247,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":14080106248,"package_name":"github.com/docker/go-connections","ecosystem":"go","requirements":"v0.4.0","direct":true,"kind":"runtime","optional":false},{"id":14080106249,"package_name":"github.com/docker/go-units","ecosystem":"go","requirements":"v0.5.0","direct":true,"kind":"runtime","optional":false},{"id":14080106250,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":true,"kind":"runtime","optional":false},{"id":14080106251,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":true,"kind":"runtime","optional":false},{"id":14080106252,"package_name":"github.com/inconshreveable/mousetrap","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080106253,"package_name":"github.com/moby/term","ecosystem":"go","requirements":"v0.0.0-20221205130635-1aeaba878587","direct":true,"kind":"runtime","optional":false},{"id":14080106254,"package_name":"github.com/morikuni/aec","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":14080106255,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106256,"package_name":"github.com/russross/blackfriday/v2","ecosystem":"go","requirements":"v2.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080106257,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106258,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":true,"kind":"runtime","optional":false},{"id":14080106259,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":true,"kind":"runtime","optional":false},{"id":14080106260,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.10.0","direct":true,"kind":"runtime","optional":false},{"id":14080106261,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":true,"kind":"runtime","optional":false},{"id":14080106262,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080106263,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.0.0-20210723032227-1f47c861a9ac","direct":true,"kind":"runtime","optional":false},{"id":14080106264,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":true,"kind":"runtime","optional":false},{"id":14080106265,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":true,"kind":"runtime","optional":false},{"id":14080106266,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20201130134442-10cb98267c6c","direct":true,"kind":"runtime","optional":false},{"id":14080106267,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":true,"kind":"runtime","optional":false},{"id":14080106268,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.0.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2023-10-03T11:42:51.228Z","updated_at":"2023-10-03T11:42:51.228Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/go.sum","dependencies":[{"id":14080106327,"package_name":"cloud.google.com/go/compute","ecosystem":"go","requirements":"v1.19.3","direct":false,"kind":"runtime","optional":false},{"id":14080106328,"package_name":"cloud.google.com/go/compute/metadata","ecosystem":"go","requirements":"v0.2.3","direct":false,"kind":"runtime","optional":false},{"id":14080106329,"package_name":"github.com/Azure/go-ansiterm","ecosystem":"go","requirements":"v0.0.0-20210617225240-d185dfc1b5a1","direct":false,"kind":"runtime","optional":false},{"id":14080106330,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106331,"package_name":"github.com/Microsoft/go-winio","ecosystem":"go","requirements":"v0.6.1","direct":false,"kind":"runtime","optional":false},{"id":14080106332,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":false,"kind":"runtime","optional":false},{"id":14080106333,"package_name":"github.com/cpuguy83/go-md2man/v2","ecosystem":"go","requirements":"v2.0.2","direct":false,"kind":"runtime","optional":false},{"id":14080106334,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106335,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106336,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106337,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106338,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106339,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106340,"package_name":"github.com/docker/go-connections","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106341,"package_name":"github.com/docker/go-units","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106342,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080106343,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080106344,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106345,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":false,"kind":"runtime","optional":false},{"id":14080106346,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106347,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":14080106348,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":14080106349,"package_name":"github.com/inconshreveable/mousetrap","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106350,"package_name":"github.com/kisielk/errcheck","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106351,"package_name":"github.com/kisielk/gotool","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106352,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":false,"kind":"runtime","optional":false},{"id":14080106353,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106354,"package_name":"github.com/kr/pty","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106355,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106356,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106357,"package_name":"github.com/moby/term","ecosystem":"go","requirements":"v0.0.0-20221205130635-1aeaba878587","direct":false,"kind":"runtime","optional":false},{"id":14080106358,"package_name":"github.com/morikuni/aec","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106359,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106360,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":false,"kind":"runtime","optional":false},{"id":14080106361,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.8.1","direct":false,"kind":"runtime","optional":false},{"id":14080106362,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106363,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106364,"package_name":"github.com/russross/blackfriday/v2","ecosystem":"go","requirements":"v2.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106365,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080106366,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106367,"package_name":"github.com/spf13/cobra","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106368,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.3","direct":false,"kind":"runtime","optional":false},{"id":14080106369,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":false,"kind":"runtime","optional":false},{"id":14080106370,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106371,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106372,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106373,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106374,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":false,"kind":"runtime","optional":false},{"id":14080106375,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106376,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.1","direct":false,"kind":"runtime","optional":false},{"id":14080106377,"package_name":"github.com/urfave/cli","ecosystem":"go","requirements":"v1.22.12","direct":false,"kind":"runtime","optional":false},{"id":14080106378,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":false,"kind":"runtime","optional":false},{"id":14080106379,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.1.27","direct":false,"kind":"runtime","optional":false},{"id":14080106380,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106381,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190308221718-c2843e01d9a2","direct":false,"kind":"runtime","optional":false},{"id":14080106382,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20191011191535-87dc89f01550","direct":false,"kind":"runtime","optional":false},{"id":14080106383,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20200622213623-75b288015ac9","direct":false,"kind":"runtime","optional":false},{"id":14080106384,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106385,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106386,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080106387,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190311183353-d8887717615a","direct":false,"kind":"runtime","optional":false},{"id":14080106388,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190404232315-eb5bcb51f2a3","direct":false,"kind":"runtime","optional":false},{"id":14080106389,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190603091049-60506f45cf65","direct":false,"kind":"runtime","optional":false},{"id":14080106390,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190620200207-3b0461eec859","direct":false,"kind":"runtime","optional":false},{"id":14080106391,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200226121028-0de0cce0169b","direct":false,"kind":"runtime","optional":false},{"id":14080106392,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201021035429-f5854403a974","direct":false,"kind":"runtime","optional":false},{"id":14080106393,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080106394,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106395,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190423024810-112230192c58","direct":false,"kind":"runtime","optional":false},{"id":14080106396,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190911185100-cd5d95a43a6e","direct":false,"kind":"runtime","optional":false},{"id":14080106397,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20201020160332-67f06af15bc9","direct":false,"kind":"runtime","optional":false},{"id":14080106398,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106399,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190215142949-d0b11bdaac8a","direct":false,"kind":"runtime","optional":false},{"id":14080106400,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190412213103-97732733099d","direct":false,"kind":"runtime","optional":false},{"id":14080106401,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200930185726-fdedc70b468f","direct":false,"kind":"runtime","optional":false},{"id":14080106402,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220715151400-c0bba94af5f8","direct":false,"kind":"runtime","optional":false},{"id":14080106403,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220906165534-d0df966e6959","direct":false,"kind":"runtime","optional":false},{"id":14080106404,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106405,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106406,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080106407,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.3","direct":false,"kind":"runtime","optional":false},{"id":14080106408,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.0.0-20210723032227-1f47c861a9ac","direct":false,"kind":"runtime","optional":false},{"id":14080106409,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20180917221912-90fa682c2a6e","direct":false,"kind":"runtime","optional":false},{"id":14080106410,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190624222133-a101b041ded4","direct":false,"kind":"runtime","optional":false},{"id":14080106411,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191119224855-298f0cb1881e","direct":false,"kind":"runtime","optional":false},{"id":14080106412,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200619180055-7c47624df98f","direct":false,"kind":"runtime","optional":false},{"id":14080106413,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20210106214847-113979e3529a","direct":false,"kind":"runtime","optional":false},{"id":14080106414,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106415,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20190717185122-a985d3407aa7","direct":false,"kind":"runtime","optional":false},{"id":14080106416,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191011141410-1b5146add898","direct":false,"kind":"runtime","optional":false},{"id":14080106417,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":14080106418,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20200804184101-5ec99f83aff1","direct":false,"kind":"runtime","optional":false},{"id":14080106419,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":false,"kind":"runtime","optional":false},{"id":14080106420,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":14080106421,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":14080106422,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":false,"kind":"runtime","optional":false},{"id":14080106423,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":14080106424,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20201130134442-10cb98267c6c","direct":false,"kind":"runtime","optional":false},{"id":14080106425,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106426,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false},{"id":14080106427,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":false,"kind":"runtime","optional":false},{"id":14080106428,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.0.3","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"pkg/authn/k8schain/go.mod","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:51.313Z","updated_at":"2023-10-03T11:42:51.313Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/pkg/authn/k8schain/go.mod","dependencies":[{"id":14080106438,"package_name":"github.com/google/go-containerregistry=\u003e","ecosystem":"go","requirements":"../../../","direct":true,"kind":"runtime","optional":false},{"id":14080106458,"package_name":"github.com/google/go-containerregistry/pkg/authn/kubernetes=\u003e","ecosystem":"go","requirements":"../kubernetes/","direct":true,"kind":"runtime","optional":false},{"id":14080106473,"package_name":"github.com/awslabs/amazon-ecr-credential-helper/ecr-login","ecosystem":"go","requirements":"v0.0.0-20230510185313-f5e39e5f34c7","direct":true,"kind":"runtime","optional":false},{"id":14080106474,"package_name":"github.com/chrismellard/docker-credential-acr-env","ecosystem":"go","requirements":"v0.0.0-20230304212654-82a0ddb27589","direct":true,"kind":"runtime","optional":false},{"id":14080106475,"package_name":"github.com/google/go-containerregistry","ecosystem":"go","requirements":"v0.15.2","direct":true,"kind":"runtime","optional":false},{"id":14080106476,"package_name":"github.com/google/go-containerregistry/pkg/authn/kubernetes","ecosystem":"go","requirements":"v0.0.0-20230516205744-dbecb1de8cfa","direct":true,"kind":"runtime","optional":false},{"id":14080106498,"package_name":"k8s.io/api","ecosystem":"go","requirements":"v0.27.1","direct":true,"kind":"runtime","optional":false},{"id":14080106499,"package_name":"k8s.io/client-go","ecosystem":"go","requirements":"v0.27.1","direct":true,"kind":"runtime","optional":false},{"id":14080106500,"package_name":"cloud.google.com/go/compute","ecosystem":"go","requirements":"v1.19.3","direct":true,"kind":"runtime","optional":false},{"id":14080106501,"package_name":"cloud.google.com/go/compute/metadata","ecosystem":"go","requirements":"v0.2.3","direct":true,"kind":"runtime","optional":false},{"id":14080106502,"package_name":"github.com/Azure/azure-sdk-for-go","ecosystem":"go","requirements":"v68.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106503,"package_name":"github.com/Azure/go-autorest","ecosystem":"go","requirements":"v14.2.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106504,"package_name":"github.com/Azure/go-autorest/autorest","ecosystem":"go","requirements":"v0.11.29","direct":true,"kind":"runtime","optional":false},{"id":14080106505,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.23","direct":true,"kind":"runtime","optional":false},{"id":14080106506,"package_name":"github.com/Azure/go-autorest/autorest/azure/auth","ecosystem":"go","requirements":"v0.5.12","direct":true,"kind":"runtime","optional":false},{"id":14080106507,"package_name":"github.com/Azure/go-autorest/autorest/azure/cli","ecosystem":"go","requirements":"v0.4.6","direct":true,"kind":"runtime","optional":false},{"id":14080106508,"package_name":"github.com/Azure/go-autorest/autorest/date","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":14080106509,"package_name":"github.com/Azure/go-autorest/logger","ecosystem":"go","requirements":"v0.2.1","direct":true,"kind":"runtime","optional":false},{"id":14080106510,"package_name":"github.com/Azure/go-autorest/tracing","ecosystem":"go","requirements":"v0.6.0","direct":true,"kind":"runtime","optional":false},{"id":14080106511,"package_name":"github.com/aws/aws-sdk-go-v2","ecosystem":"go","requirements":"v1.18.0","direct":true,"kind":"runtime","optional":false},{"id":14080106512,"package_name":"github.com/aws/aws-sdk-go-v2/config","ecosystem":"go","requirements":"v1.18.25","direct":true,"kind":"runtime","optional":false},{"id":14080106513,"package_name":"github.com/aws/aws-sdk-go-v2/credentials","ecosystem":"go","requirements":"v1.13.24","direct":true,"kind":"runtime","optional":false},{"id":14080106514,"package_name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","ecosystem":"go","requirements":"v1.13.3","direct":true,"kind":"runtime","optional":false},{"id":14080106515,"package_name":"github.com/aws/aws-sdk-go-v2/internal/configsources","ecosystem":"go","requirements":"v1.1.33","direct":true,"kind":"runtime","optional":false},{"id":14080106516,"package_name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","ecosystem":"go","requirements":"v2.4.27","direct":true,"kind":"runtime","optional":false},{"id":14080106517,"package_name":"github.com/aws/aws-sdk-go-v2/internal/ini","ecosystem":"go","requirements":"v1.3.34","direct":true,"kind":"runtime","optional":false},{"id":14080106518,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecr","ecosystem":"go","requirements":"v1.18.11","direct":true,"kind":"runtime","optional":false},{"id":14080106519,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecrpublic","ecosystem":"go","requirements":"v1.16.2","direct":true,"kind":"runtime","optional":false},{"id":14080106520,"package_name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","ecosystem":"go","requirements":"v1.9.27","direct":true,"kind":"runtime","optional":false},{"id":14080106521,"package_name":"github.com/aws/aws-sdk-go-v2/service/sso","ecosystem":"go","requirements":"v1.12.10","direct":true,"kind":"runtime","optional":false},{"id":14080106522,"package_name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","ecosystem":"go","requirements":"v1.14.10","direct":true,"kind":"runtime","optional":false},{"id":14080106523,"package_name":"github.com/aws/aws-sdk-go-v2/service/sts","ecosystem":"go","requirements":"v1.19.0","direct":true,"kind":"runtime","optional":false},{"id":14080106524,"package_name":"github.com/aws/smithy-go","ecosystem":"go","requirements":"v1.13.5","direct":true,"kind":"runtime","optional":false},{"id":14080106525,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":true,"kind":"runtime","optional":false},{"id":14080106526,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":14080106527,"package_name":"github.com/dimchansky/utfbom","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":14080106528,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106529,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106530,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080106531,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":14080106532,"package_name":"github.com/emicklei/go-restful/v3","ecosystem":"go","requirements":"v3.10.2","direct":true,"kind":"runtime","optional":false},{"id":14080106533,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.4","direct":true,"kind":"runtime","optional":false},{"id":14080106534,"package_name":"github.com/go-openapi/jsonpointer","ecosystem":"go","requirements":"v0.19.6","direct":true,"kind":"runtime","optional":false},{"id":14080106535,"package_name":"github.com/go-openapi/jsonreference","ecosystem":"go","requirements":"v0.20.2","direct":true,"kind":"runtime","optional":false},{"id":14080106536,"package_name":"github.com/go-openapi/swag","ecosystem":"go","requirements":"v0.22.3","direct":true,"kind":"runtime","optional":false},{"id":14080106537,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":true,"kind":"runtime","optional":false},{"id":14080106538,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.5.0","direct":true,"kind":"runtime","optional":false},{"id":14080106539,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":true,"kind":"runtime","optional":false},{"id":14080106540,"package_name":"github.com/google/gnostic","ecosystem":"go","requirements":"v0.6.9","direct":true,"kind":"runtime","optional":false},{"id":14080106541,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":true,"kind":"runtime","optional":false},{"id":14080106542,"package_name":"github.com/google/gofuzz","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":14080106543,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.3.0","direct":true,"kind":"runtime","optional":false},{"id":14080106544,"package_name":"github.com/jmespath/go-jmespath","ecosystem":"go","requirements":"v0.4.0","direct":true,"kind":"runtime","optional":false},{"id":14080106545,"package_name":"github.com/josharian/intern","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":14080106546,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.12","direct":true,"kind":"runtime","optional":false},{"id":14080106547,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":true,"kind":"runtime","optional":false},{"id":14080106548,"package_name":"github.com/mailru/easyjson","ecosystem":"go","requirements":"v0.7.7","direct":true,"kind":"runtime","optional":false},{"id":14080106549,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080106550,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180306012644-bacd9c7ef1dd","direct":true,"kind":"runtime","optional":false},{"id":14080106551,"package_name":"github.com/modern-go/reflect2","ecosystem":"go","requirements":"v1.0.2","direct":true,"kind":"runtime","optional":false},{"id":14080106552,"package_name":"github.com/munnerz/goautoneg","ecosystem":"go","requirements":"v0.0.0-20191010083416-a7dc8b61c822","direct":true,"kind":"runtime","optional":false},{"id":14080106553,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":14080106554,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":true,"kind":"runtime","optional":false},{"id":14080106555,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106556,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106557,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":true,"kind":"runtime","optional":false},{"id":14080106558,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.9.0","direct":true,"kind":"runtime","optional":false},{"id":14080106559,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":true,"kind":"runtime","optional":false},{"id":14080106560,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080106561,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":14080106562,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080106563,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080106564,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.9.0","direct":true,"kind":"runtime","optional":false},{"id":14080106565,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":14080106566,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":true,"kind":"runtime","optional":false},{"id":14080106567,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":true,"kind":"runtime","optional":false},{"id":14080106568,"package_name":"gopkg.in/inf.v0","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080106569,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.4.0","direct":true,"kind":"runtime","optional":false},{"id":14080106570,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":true,"kind":"runtime","optional":false},{"id":14080106571,"package_name":"k8s.io/apimachinery","ecosystem":"go","requirements":"v0.27.1","direct":true,"kind":"runtime","optional":false},{"id":14080106572,"package_name":"k8s.io/klog/v2","ecosystem":"go","requirements":"v2.100.1","direct":true,"kind":"runtime","optional":false},{"id":14080106573,"package_name":"k8s.io/kube-openapi","ecosystem":"go","requirements":"v0.0.0-20230515203736-54b630e78af5","direct":true,"kind":"runtime","optional":false},{"id":14080106574,"package_name":"k8s.io/utils","ecosystem":"go","requirements":"v0.0.0-20230505201702-9f6742963106","direct":true,"kind":"runtime","optional":false},{"id":14080106575,"package_name":"sigs.k8s.io/json","ecosystem":"go","requirements":"v0.0.0-20221116044647-bc3834ca7abd","direct":true,"kind":"runtime","optional":false},{"id":14080106576,"package_name":"sigs.k8s.io/structured-merge-diff/v4","ecosystem":"go","requirements":"v4.2.3","direct":true,"kind":"runtime","optional":false},{"id":14080106577,"package_name":"sigs.k8s.io/yaml","ecosystem":"go","requirements":"v1.3.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"pkg/authn/k8schain/go.sum","sha":null,"kind":"lockfile","created_at":"2023-10-03T11:42:51.481Z","updated_at":"2023-10-03T11:42:51.481Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/pkg/authn/k8schain/go.sum","dependencies":[{"id":14080106598,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.26.0","direct":false,"kind":"runtime","optional":false},{"id":14080106599,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.34.0","direct":false,"kind":"runtime","optional":false},{"id":14080106600,"package_name":"cloud.google.com/go/compute","ecosystem":"go","requirements":"v1.19.3","direct":false,"kind":"runtime","optional":false},{"id":14080106601,"package_name":"cloud.google.com/go/compute/metadata","ecosystem":"go","requirements":"v0.2.3","direct":false,"kind":"runtime","optional":false},{"id":14080106602,"package_name":"github.com/Azure/azure-sdk-for-go","ecosystem":"go","requirements":"v68.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106603,"package_name":"github.com/Azure/go-autorest","ecosystem":"go","requirements":"v14.2.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106604,"package_name":"github.com/Azure/go-autorest/autorest","ecosystem":"go","requirements":"v0.11.24","direct":false,"kind":"runtime","optional":false},{"id":14080106605,"package_name":"github.com/Azure/go-autorest/autorest","ecosystem":"go","requirements":"v0.11.29","direct":false,"kind":"runtime","optional":false},{"id":14080106606,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.18","direct":false,"kind":"runtime","optional":false},{"id":14080106607,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.22","direct":false,"kind":"runtime","optional":false},{"id":14080106608,"package_name":"github.com/Azure/go-autorest/autorest/adal","ecosystem":"go","requirements":"v0.9.23","direct":false,"kind":"runtime","optional":false},{"id":14080106609,"package_name":"github.com/Azure/go-autorest/autorest/azure/auth","ecosystem":"go","requirements":"v0.5.12","direct":false,"kind":"runtime","optional":false},{"id":14080106610,"package_name":"github.com/Azure/go-autorest/autorest/azure/cli","ecosystem":"go","requirements":"v0.4.5","direct":false,"kind":"runtime","optional":false},{"id":14080106611,"package_name":"github.com/Azure/go-autorest/autorest/azure/cli","ecosystem":"go","requirements":"v0.4.6","direct":false,"kind":"runtime","optional":false},{"id":14080106612,"package_name":"github.com/Azure/go-autorest/autorest/date","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106613,"package_name":"github.com/Azure/go-autorest/autorest/mocks","ecosystem":"go","requirements":"v0.4.1","direct":false,"kind":"runtime","optional":false},{"id":14080106614,"package_name":"github.com/Azure/go-autorest/autorest/mocks","ecosystem":"go","requirements":"v0.4.2","direct":false,"kind":"runtime","optional":false},{"id":14080106615,"package_name":"github.com/Azure/go-autorest/logger","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106616,"package_name":"github.com/Azure/go-autorest/tracing","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":14080106617,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080106618,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106619,"package_name":"github.com/OneOfOne/xxhash","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":14080106620,"package_name":"github.com/antihax/optional","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106621,"package_name":"github.com/aws/aws-sdk-go-v2","ecosystem":"go","requirements":"v1.18.0","direct":false,"kind":"runtime","optional":false},{"id":14080106622,"package_name":"github.com/aws/aws-sdk-go-v2/config","ecosystem":"go","requirements":"v1.18.25","direct":false,"kind":"runtime","optional":false},{"id":14080106623,"package_name":"github.com/aws/aws-sdk-go-v2/credentials","ecosystem":"go","requirements":"v1.13.24","direct":false,"kind":"runtime","optional":false},{"id":14080106624,"package_name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","ecosystem":"go","requirements":"v1.13.3","direct":false,"kind":"runtime","optional":false},{"id":14080106625,"package_name":"github.com/aws/aws-sdk-go-v2/internal/configsources","ecosystem":"go","requirements":"v1.1.33","direct":false,"kind":"runtime","optional":false},{"id":14080106626,"package_name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","ecosystem":"go","requirements":"v2.4.27","direct":false,"kind":"runtime","optional":false},{"id":14080106627,"package_name":"github.com/aws/aws-sdk-go-v2/internal/ini","ecosystem":"go","requirements":"v1.3.34","direct":false,"kind":"runtime","optional":false},{"id":14080106628,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecr","ecosystem":"go","requirements":"v1.18.11","direct":false,"kind":"runtime","optional":false},{"id":14080106629,"package_name":"github.com/aws/aws-sdk-go-v2/service/ecrpublic","ecosystem":"go","requirements":"v1.16.2","direct":false,"kind":"runtime","optional":false},{"id":14080106630,"package_name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","ecosystem":"go","requirements":"v1.9.27","direct":false,"kind":"runtime","optional":false},{"id":14080106631,"package_name":"github.com/aws/aws-sdk-go-v2/service/sso","ecosystem":"go","requirements":"v1.12.10","direct":false,"kind":"runtime","optional":false},{"id":14080106632,"package_name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","ecosystem":"go","requirements":"v1.14.10","direct":false,"kind":"runtime","optional":false},{"id":14080106633,"package_name":"github.com/aws/aws-sdk-go-v2/service/sts","ecosystem":"go","requirements":"v1.19.0","direct":false,"kind":"runtime","optional":false},{"id":14080106634,"package_name":"github.com/aws/smithy-go","ecosystem":"go","requirements":"v1.13.5","direct":false,"kind":"runtime","optional":false},{"id":14080106635,"package_name":"github.com/awslabs/amazon-ecr-credential-helper/ecr-login","ecosystem":"go","requirements":"v0.0.0-20230510185313-f5e39e5f34c7","direct":false,"kind":"runtime","optional":false},{"id":14080106636,"package_name":"github.com/buger/jsonparser","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106637,"package_name":"github.com/census-instrumentation/opencensus-proto","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106638,"package_name":"github.com/cespare/xxhash","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106639,"package_name":"github.com/chrismellard/docker-credential-acr-env","ecosystem":"go","requirements":"v0.0.0-20230304212654-82a0ddb27589","direct":false,"kind":"runtime","optional":false},{"id":14080106640,"package_name":"github.com/client9/misspell","ecosystem":"go","requirements":"v0.3.4","direct":false,"kind":"runtime","optional":false},{"id":14080106641,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20191209042840-269d4d468f6f","direct":false,"kind":"runtime","optional":false},{"id":14080106642,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20201120205902-5459f2c99403","direct":false,"kind":"runtime","optional":false},{"id":14080106643,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20210312221358-fbca930ec8ed","direct":false,"kind":"runtime","optional":false},{"id":14080106644,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":false,"kind":"runtime","optional":false},{"id":14080106645,"package_name":"github.com/cpuguy83/go-md2man/v2","ecosystem":"go","requirements":"v2.0.2","direct":false,"kind":"runtime","optional":false},{"id":14080106646,"package_name":"github.com/creack/pty","ecosystem":"go","requirements":"v1.1.9","direct":false,"kind":"runtime","optional":false},{"id":14080106647,"package_name":"github.com/danieljoos/wincred","ecosystem":"go","requirements":"v1.1.2","direct":false,"kind":"runtime","optional":false},{"id":14080106648,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106649,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106650,"package_name":"github.com/dimchansky/utfbom","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106651,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106652,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106653,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106654,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106655,"package_name":"github.com/docopt/docopt-go","ecosystem":"go","requirements":"v0.0.0-20180111231733-ee0de3bc6815","direct":false,"kind":"runtime","optional":false},{"id":14080106656,"package_name":"github.com/emicklei/go-restful/v3","ecosystem":"go","requirements":"v3.10.2","direct":false,"kind":"runtime","optional":false},{"id":14080106657,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080106658,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.1-0.20191026205805-5f8ba28d4473","direct":false,"kind":"runtime","optional":false},{"id":14080106659,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.4","direct":false,"kind":"runtime","optional":false},{"id":14080106660,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20201210154907-fd9021fe5dad","direct":false,"kind":"runtime","optional":false},{"id":14080106661,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20210512163311-63b5d3c536b0","direct":false,"kind":"runtime","optional":false},{"id":14080106662,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106663,"package_name":"github.com/evanphx/json-patch","ecosystem":"go","requirements":"v4.12.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080106664,"package_name":"github.com/flowstack/go-jsonschema","ecosystem":"go","requirements":"v0.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106665,"package_name":"github.com/ghodss/yaml","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106666,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106667,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.4","direct":false,"kind":"runtime","optional":false},{"id":14080106668,"package_name":"github.com/go-openapi/jsonpointer","ecosystem":"go","requirements":"v0.19.6","direct":false,"kind":"runtime","optional":false},{"id":14080106669,"package_name":"github.com/go-openapi/jsonreference","ecosystem":"go","requirements":"v0.20.2","direct":false,"kind":"runtime","optional":false},{"id":14080106670,"package_name":"github.com/go-openapi/swag","ecosystem":"go","requirements":"v0.22.3","direct":false,"kind":"runtime","optional":false},{"id":14080106671,"package_name":"github.com/go-task/slim-sprig","ecosystem":"go","requirements":"v0.0.0-20210107165309-348f09dbbbc0","direct":false,"kind":"runtime","optional":false},{"id":14080106672,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080106673,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106674,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106675,"package_name":"github.com/golang-jwt/jwt/v4","ecosystem":"go","requirements":"v4.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106676,"package_name":"github.com/golang/glog","ecosystem":"go","requirements":"v0.0.0-20160126235308-23def4e6c14b","direct":false,"kind":"runtime","optional":false},{"id":14080106677,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106678,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106679,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080106680,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080106681,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.3","direct":false,"kind":"runtime","optional":false},{"id":14080106682,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":14080106683,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1.0.20200221234624-67d41d38c208","direct":false,"kind":"runtime","optional":false},{"id":14080106684,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.2","direct":false,"kind":"runtime","optional":false},{"id":14080106685,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.4.0.20200313231945-b860323f09d0","direct":false,"kind":"runtime","optional":false},{"id":14080106686,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106687,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":14080106688,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.2","direct":false,"kind":"runtime","optional":false},{"id":14080106689,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.3","direct":false,"kind":"runtime","optional":false},{"id":14080106690,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106691,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.2","direct":false,"kind":"runtime","optional":false},{"id":14080106692,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":false,"kind":"runtime","optional":false},{"id":14080106693,"package_name":"github.com/google/gnostic","ecosystem":"go","requirements":"v0.6.9","direct":false,"kind":"runtime","optional":false},{"id":14080106694,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106695,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106696,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080106697,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106698,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106699,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":14080106700,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.8","direct":false,"kind":"runtime","optional":false},{"id":14080106701,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":14080106702,"package_name":"github.com/google/gofuzz","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106703,"package_name":"github.com/google/gofuzz","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106704,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20210720184732-4bb14d4b1be1","direct":false,"kind":"runtime","optional":false},{"id":14080106705,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.1.2","direct":false,"kind":"runtime","optional":false},{"id":14080106706,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106707,"package_name":"github.com/grpc-ecosystem/grpc-gateway","ecosystem":"go","requirements":"v1.16.0","direct":false,"kind":"runtime","optional":false},{"id":14080106708,"package_name":"github.com/jmespath/go-jmespath","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106709,"package_name":"github.com/jmespath/go-jmespath/internal/testify","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":14080106710,"package_name":"github.com/josharian/intern","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106711,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.12","direct":false,"kind":"runtime","optional":false},{"id":14080106712,"package_name":"github.com/kisielk/errcheck","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106713,"package_name":"github.com/kisielk/gotool","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106714,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":false,"kind":"runtime","optional":false},{"id":14080106715,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106716,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106717,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106718,"package_name":"github.com/kr/pty","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080106719,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106720,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106721,"package_name":"github.com/mailru/easyjson","ecosystem":"go","requirements":"v0.7.7","direct":false,"kind":"runtime","optional":false},{"id":14080106722,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106723,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180228061459-e0a39a4cb421","direct":false,"kind":"runtime","optional":false},{"id":14080106724,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180306012644-bacd9c7ef1dd","direct":false,"kind":"runtime","optional":false},{"id":14080106725,"package_name":"github.com/modern-go/reflect2","ecosystem":"go","requirements":"v1.0.2","direct":false,"kind":"runtime","optional":false},{"id":14080106726,"package_name":"github.com/munnerz/goautoneg","ecosystem":"go","requirements":"v0.0.0-20191010083416-a7dc8b61c822","direct":false,"kind":"runtime","optional":false},{"id":14080106727,"package_name":"github.com/onsi/ginkgo/v2","ecosystem":"go","requirements":"v2.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106728,"package_name":"github.com/onsi/gomega","ecosystem":"go","requirements":"v1.27.4","direct":false,"kind":"runtime","optional":false},{"id":14080106729,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106730,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":false,"kind":"runtime","optional":false},{"id":14080106731,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106732,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080106733,"package_name":"github.com/prometheus/client_model","ecosystem":"go","requirements":"v0.0.0-20190812154241-14fe0d1b01d4","direct":false,"kind":"runtime","optional":false},{"id":14080106734,"package_name":"github.com/rogpeppe/fastuuid","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106735,"package_name":"github.com/rogpeppe/go-internal","ecosystem":"go","requirements":"v1.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080106736,"package_name":"github.com/russross/blackfriday/v2","ecosystem":"go","requirements":"v2.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106737,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080106738,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106739,"package_name":"github.com/spaolacci/murmur3","ecosystem":"go","requirements":"v0.0.0-20180118202830-f09979ecbc72","direct":false,"kind":"runtime","optional":false},{"id":14080106740,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":false,"kind":"runtime","optional":false},{"id":14080106741,"package_name":"github.com/stoewer/go-strcase","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106742,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106743,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106744,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106745,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106746,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":14080106747,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106748,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":false,"kind":"runtime","optional":false},{"id":14080106749,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106750,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.1","direct":false,"kind":"runtime","optional":false},{"id":14080106751,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.2","direct":false,"kind":"runtime","optional":false},{"id":14080106752,"package_name":"github.com/urfave/cli","ecosystem":"go","requirements":"v1.22.12","direct":false,"kind":"runtime","optional":false},{"id":14080106753,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":false,"kind":"runtime","optional":false},{"id":14080106754,"package_name":"github.com/xeipuuv/gojsonpointer","ecosystem":"go","requirements":"v0.0.0-20180127040702-4e3ac2762d5f","direct":false,"kind":"runtime","optional":false},{"id":14080106755,"package_name":"github.com/xeipuuv/gojsonreference","ecosystem":"go","requirements":"v0.0.0-20180127040603-bd5ef7bd5415","direct":false,"kind":"runtime","optional":false},{"id":14080106756,"package_name":"github.com/xeipuuv/gojsonschema","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106757,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.1.27","direct":false,"kind":"runtime","optional":false},{"id":14080106758,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080106759,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.4.13","direct":false,"kind":"runtime","optional":false},{"id":14080106760,"package_name":"go.opentelemetry.io/proto/otlp","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106761,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190308221718-c2843e01d9a2","direct":false,"kind":"runtime","optional":false},{"id":14080106762,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20191011191535-87dc89f01550","direct":false,"kind":"runtime","optional":false},{"id":14080106763,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20200622213623-75b288015ac9","direct":false,"kind":"runtime","optional":false},{"id":14080106764,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20210921155107-089bfa567519","direct":false,"kind":"runtime","optional":false},{"id":14080106765,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20211215153901-e495a2d5b3d3","direct":false,"kind":"runtime","optional":false},{"id":14080106766,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20220722155217-630584e8d5aa","direct":false,"kind":"runtime","optional":false},{"id":14080106767,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":14080106768,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080106769,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20190121172915-509febef88a4","direct":false,"kind":"runtime","optional":false},{"id":14080106770,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20181026193005-c67002cb31c3","direct":false,"kind":"runtime","optional":false},{"id":14080106771,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190227174305-5b3e6a55c961","direct":false,"kind":"runtime","optional":false},{"id":14080106772,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190313153728-d0100b6bd8b3","direct":false,"kind":"runtime","optional":false},{"id":14080106773,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106774,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106775,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.6.0-dev.0.20220419223038-86c51ed26bb4","direct":false,"kind":"runtime","optional":false},{"id":14080106776,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180724234803-3673e40ba225","direct":false,"kind":"runtime","optional":false},{"id":14080106777,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180826012351-8a410e7b638d","direct":false,"kind":"runtime","optional":false},{"id":14080106778,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190108225652-1e06a53dbb7e","direct":false,"kind":"runtime","optional":false},{"id":14080106779,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190213061140-3a22650c66bd","direct":false,"kind":"runtime","optional":false},{"id":14080106780,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190311183353-d8887717615a","direct":false,"kind":"runtime","optional":false},{"id":14080106781,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190404232315-eb5bcb51f2a3","direct":false,"kind":"runtime","optional":false},{"id":14080106782,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190603091049-60506f45cf65","direct":false,"kind":"runtime","optional":false},{"id":14080106783,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190620200207-3b0461eec859","direct":false,"kind":"runtime","optional":false},{"id":14080106784,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200226121028-0de0cce0169b","direct":false,"kind":"runtime","optional":false},{"id":14080106785,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200822124328-c89045814202","direct":false,"kind":"runtime","optional":false},{"id":14080106786,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201021035429-f5854403a974","direct":false,"kind":"runtime","optional":false},{"id":14080106787,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210226172049-e18ecbb05110","direct":false,"kind":"runtime","optional":false},{"id":14080106788,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210405180319-a5a99cb37ef4","direct":false,"kind":"runtime","optional":false},{"id":14080106789,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210805182204-aaa1db679c0d","direct":false,"kind":"runtime","optional":false},{"id":14080106790,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20211112202133-69e39bad7dc2","direct":false,"kind":"runtime","optional":false},{"id":14080106791,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20220722155237-a158d28d115b","direct":false,"kind":"runtime","optional":false},{"id":14080106792,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":14080106793,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080106794,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20180821212333-d2e6202438be","direct":false,"kind":"runtime","optional":false},{"id":14080106795,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20200107190931-bf48bf16ab8d","direct":false,"kind":"runtime","optional":false},{"id":14080106796,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106797,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20180314180146-1d60e4601c6f","direct":false,"kind":"runtime","optional":false},{"id":14080106798,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181108010431-42b317875d0f","direct":false,"kind":"runtime","optional":false},{"id":14080106799,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181221193216-37e7f081c4d4","direct":false,"kind":"runtime","optional":false},{"id":14080106800,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190423024810-112230192c58","direct":false,"kind":"runtime","optional":false},{"id":14080106801,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190911185100-cd5d95a43a6e","direct":false,"kind":"runtime","optional":false},{"id":14080106802,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20201020160332-67f06af15bc9","direct":false,"kind":"runtime","optional":false},{"id":14080106803,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20220722155255-886fb9371eb4","direct":false,"kind":"runtime","optional":false},{"id":14080106804,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080106805,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20180830151530-49385e6e1522","direct":false,"kind":"runtime","optional":false},{"id":14080106806,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190215142949-d0b11bdaac8a","direct":false,"kind":"runtime","optional":false},{"id":14080106807,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190412213103-97732733099d","direct":false,"kind":"runtime","optional":false},{"id":14080106808,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200323222414-85ca7c5b95cd","direct":false,"kind":"runtime","optional":false},{"id":14080106809,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200930185726-fdedc70b468f","direct":false,"kind":"runtime","optional":false},{"id":14080106810,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20201119102817-f84b799fce68","direct":false,"kind":"runtime","optional":false},{"id":14080106811,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210330210617-4fbd30eecc44","direct":false,"kind":"runtime","optional":false},{"id":14080106812,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210423082822-04245dca01da","direct":false,"kind":"runtime","optional":false},{"id":14080106813,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210510120138-977fb7262007","direct":false,"kind":"runtime","optional":false},{"id":14080106814,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210615035016-665e8c7367d1","direct":false,"kind":"runtime","optional":false},{"id":14080106815,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210819135213-f52c844e1c1c","direct":false,"kind":"runtime","optional":false},{"id":14080106816,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220520151302-bc2c85ada10a","direct":false,"kind":"runtime","optional":false},{"id":14080106817,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220715151400-c0bba94af5f8","direct":false,"kind":"runtime","optional":false},{"id":14080106818,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220722155257-8c9f86f7a55f","direct":false,"kind":"runtime","optional":false},{"id":14080106819,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220825204002-c680a09ffe64","direct":false,"kind":"runtime","optional":false},{"id":14080106820,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220906165534-d0df966e6959","direct":false,"kind":"runtime","optional":false},{"id":14080106821,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106822,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106823,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20201126162022-7de9c90e9dd1","direct":false,"kind":"runtime","optional":false},{"id":14080106824,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20210927222741-03fcf44c2211","direct":false,"kind":"runtime","optional":false},{"id":14080106825,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080106826,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080106827,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106828,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080106829,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.3","direct":false,"kind":"runtime","optional":false},{"id":14080106830,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.5","direct":false,"kind":"runtime","optional":false},{"id":14080106831,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.6","direct":false,"kind":"runtime","optional":false},{"id":14080106832,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.7","direct":false,"kind":"runtime","optional":false},{"id":14080106833,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080106834,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080106835,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080106836,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20180917221912-90fa682c2a6e","direct":false,"kind":"runtime","optional":false},{"id":14080106837,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190114222345-bf090417da8b","direct":false,"kind":"runtime","optional":false},{"id":14080106838,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190226205152-f727befe758c","direct":false,"kind":"runtime","optional":false},{"id":14080106839,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190311212946-11955173bddd","direct":false,"kind":"runtime","optional":false},{"id":14080106840,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190524140312-2c0ae7006135","direct":false,"kind":"runtime","optional":false},{"id":14080106841,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191119224855-298f0cb1881e","direct":false,"kind":"runtime","optional":false},{"id":14080106842,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200619180055-7c47624df98f","direct":false,"kind":"runtime","optional":false},{"id":14080106843,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20210106214847-113979e3529a","direct":false,"kind":"runtime","optional":false},{"id":14080106844,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.12","direct":false,"kind":"runtime","optional":false},{"id":14080106845,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106846,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20190717185122-a985d3407aa7","direct":false,"kind":"runtime","optional":false},{"id":14080106847,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191011141410-1b5146add898","direct":false,"kind":"runtime","optional":false},{"id":14080106848,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":14080106849,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20200804184101-5ec99f83aff1","direct":false,"kind":"runtime","optional":false},{"id":14080106850,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106851,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106852,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":false,"kind":"runtime","optional":false},{"id":14080106853,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20180817151627-c66870c02cf8","direct":false,"kind":"runtime","optional":false},{"id":14080106854,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190819201941-24fa4b261c55","direct":false,"kind":"runtime","optional":false},{"id":14080106855,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200513103714-09dca8ec2884","direct":false,"kind":"runtime","optional":false},{"id":14080106856,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200526211855-cb27e3aa2013","direct":false,"kind":"runtime","optional":false},{"id":14080106857,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20220107163113-42d7afdf6368","direct":false,"kind":"runtime","optional":false},{"id":14080106858,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.19.0","direct":false,"kind":"runtime","optional":false},{"id":14080106859,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":14080106860,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.25.1","direct":false,"kind":"runtime","optional":false},{"id":14080106861,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.27.0","direct":false,"kind":"runtime","optional":false},{"id":14080106862,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.33.1","direct":false,"kind":"runtime","optional":false},{"id":14080106863,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.36.0","direct":false,"kind":"runtime","optional":false},{"id":14080106864,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.40.0","direct":false,"kind":"runtime","optional":false},{"id":14080106865,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200109180630-ec00e32a8dfd","direct":false,"kind":"runtime","optional":false},{"id":14080106866,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200221191635-4d8936d0db64","direct":false,"kind":"runtime","optional":false},{"id":14080106867,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200228230310-ab0ca4ff8a60","direct":false,"kind":"runtime","optional":false},{"id":14080106868,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.20.1-0.20200309200217-e05f789c0967","direct":false,"kind":"runtime","optional":false},{"id":14080106869,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.21.0","direct":false,"kind":"runtime","optional":false},{"id":14080106870,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.22.0","direct":false,"kind":"runtime","optional":false},{"id":14080106871,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":14080106872,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.1-0.20200526195155-81db48ad09cc","direct":false,"kind":"runtime","optional":false},{"id":14080106873,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.25.0","direct":false,"kind":"runtime","optional":false},{"id":14080106874,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":14080106875,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":14080106876,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080106877,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":false,"kind":"runtime","optional":false},{"id":14080106878,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":14080106879,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20190902080502-41f04d3bba15","direct":false,"kind":"runtime","optional":false},{"id":14080106880,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20201130134442-10cb98267c6c","direct":false,"kind":"runtime","optional":false},{"id":14080106881,"package_name":"gopkg.in/inf.v0","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080106882,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.2","direct":false,"kind":"runtime","optional":false},{"id":14080106883,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.3","direct":false,"kind":"runtime","optional":false},{"id":14080106884,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.8","direct":false,"kind":"runtime","optional":false},{"id":14080106885,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080106886,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false},{"id":14080106887,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200615113413-eeeca48fe776","direct":false,"kind":"runtime","optional":false},{"id":14080106888,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":false,"kind":"runtime","optional":false},{"id":14080106889,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080106890,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190102054323-c2f93a96b099","direct":false,"kind":"runtime","optional":false},{"id":14080106891,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190523083050-ea95bdfd59fc","direct":false,"kind":"runtime","optional":false},{"id":14080106892,"package_name":"k8s.io/api","ecosystem":"go","requirements":"v0.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080106893,"package_name":"k8s.io/apimachinery","ecosystem":"go","requirements":"v0.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080106894,"package_name":"k8s.io/client-go","ecosystem":"go","requirements":"v0.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080106895,"package_name":"k8s.io/klog/v2","ecosystem":"go","requirements":"v2.100.1","direct":false,"kind":"runtime","optional":false},{"id":14080106896,"package_name":"k8s.io/kube-openapi","ecosystem":"go","requirements":"v0.0.0-20230515203736-54b630e78af5","direct":false,"kind":"runtime","optional":false},{"id":14080106897,"package_name":"k8s.io/utils","ecosystem":"go","requirements":"v0.0.0-20230505201702-9f6742963106","direct":false,"kind":"runtime","optional":false},{"id":14080106898,"package_name":"sigs.k8s.io/json","ecosystem":"go","requirements":"v0.0.0-20221116044647-bc3834ca7abd","direct":false,"kind":"runtime","optional":false},{"id":14080106899,"package_name":"sigs.k8s.io/structured-merge-diff/v4","ecosystem":"go","requirements":"v4.2.3","direct":false,"kind":"runtime","optional":false},{"id":14080106900,"package_name":"sigs.k8s.io/yaml","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"pkg/authn/kubernetes/go.mod","sha":null,"kind":"manifest","created_at":"2023-10-03T11:42:51.958Z","updated_at":"2023-10-03T11:42:51.958Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/pkg/authn/kubernetes/go.mod","dependencies":[{"id":14080106998,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":true,"kind":"runtime","optional":false},{"id":14080106999,"package_name":"github.com/google/go-containerregistry","ecosystem":"go","requirements":"v0.15.2","direct":true,"kind":"runtime","optional":false},{"id":14080107000,"package_name":"k8s.io/api","ecosystem":"go","requirements":"v0.27.1","direct":true,"kind":"runtime","optional":false},{"id":14080107001,"package_name":"k8s.io/apimachinery","ecosystem":"go","requirements":"v0.27.1","direct":true,"kind":"runtime","optional":false},{"id":14080107002,"package_name":"k8s.io/client-go","ecosystem":"go","requirements":"v0.27.1","direct":true,"kind":"runtime","optional":false},{"id":14080107003,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":14080107004,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080107005,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080107006,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":14080107007,"package_name":"github.com/emicklei/go-restful/v3","ecosystem":"go","requirements":"v3.10.2","direct":true,"kind":"runtime","optional":false},{"id":14080107008,"package_name":"github.com/evanphx/json-patch","ecosystem":"go","requirements":"v4.12.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":14080107009,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.4","direct":true,"kind":"runtime","optional":false},{"id":14080107010,"package_name":"github.com/go-openapi/jsonpointer","ecosystem":"go","requirements":"v0.19.6","direct":true,"kind":"runtime","optional":false},{"id":14080107011,"package_name":"github.com/go-openapi/jsonreference","ecosystem":"go","requirements":"v0.20.2","direct":true,"kind":"runtime","optional":false},{"id":14080107012,"package_name":"github.com/go-openapi/swag","ecosystem":"go","requirements":"v0.22.3","direct":true,"kind":"runtime","optional":false},{"id":14080107013,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":true,"kind":"runtime","optional":false},{"id":14080107014,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":true,"kind":"runtime","optional":false},{"id":14080107015,"package_name":"github.com/google/gnostic","ecosystem":"go","requirements":"v0.6.9","direct":true,"kind":"runtime","optional":false},{"id":14080107016,"package_name":"github.com/google/gofuzz","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":14080107017,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.3.0","direct":true,"kind":"runtime","optional":false},{"id":14080107018,"package_name":"github.com/josharian/intern","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":14080107019,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.12","direct":true,"kind":"runtime","optional":false},{"id":14080107020,"package_name":"github.com/mailru/easyjson","ecosystem":"go","requirements":"v0.7.7","direct":true,"kind":"runtime","optional":false},{"id":14080107021,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080107022,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180306012644-bacd9c7ef1dd","direct":true,"kind":"runtime","optional":false},{"id":14080107023,"package_name":"github.com/modern-go/reflect2","ecosystem":"go","requirements":"v1.0.2","direct":true,"kind":"runtime","optional":false},{"id":14080107024,"package_name":"github.com/munnerz/goautoneg","ecosystem":"go","requirements":"v0.0.0-20191010083416-a7dc8b61c822","direct":true,"kind":"runtime","optional":false},{"id":14080107025,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":14080107026,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080107027,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080107028,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":true,"kind":"runtime","optional":false},{"id":14080107029,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080107030,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080107031,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":14080107032,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.9.0","direct":true,"kind":"runtime","optional":false},{"id":14080107033,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":14080107034,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":true,"kind":"runtime","optional":false},{"id":14080107035,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":true,"kind":"runtime","optional":false},{"id":14080107036,"package_name":"gopkg.in/inf.v0","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":14080107037,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.4.0","direct":true,"kind":"runtime","optional":false},{"id":14080107038,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":true,"kind":"runtime","optional":false},{"id":14080107039,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.1.0","direct":true,"kind":"runtime","optional":false},{"id":14080107040,"package_name":"k8s.io/klog/v2","ecosystem":"go","requirements":"v2.100.1","direct":true,"kind":"runtime","optional":false},{"id":14080107041,"package_name":"k8s.io/kube-openapi","ecosystem":"go","requirements":"v0.0.0-20230515203736-54b630e78af5","direct":true,"kind":"runtime","optional":false},{"id":14080107042,"package_name":"k8s.io/utils","ecosystem":"go","requirements":"v0.0.0-20230505201702-9f6742963106","direct":true,"kind":"runtime","optional":false},{"id":14080107043,"package_name":"sigs.k8s.io/json","ecosystem":"go","requirements":"v0.0.0-20221116044647-bc3834ca7abd","direct":true,"kind":"runtime","optional":false},{"id":14080107044,"package_name":"sigs.k8s.io/structured-merge-diff/v4","ecosystem":"go","requirements":"v4.2.3","direct":true,"kind":"runtime","optional":false},{"id":14080107045,"package_name":"sigs.k8s.io/yaml","ecosystem":"go","requirements":"v1.3.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"pkg/authn/kubernetes/go.sum","sha":null,"kind":"lockfile","created_at":"2023-10-03T11:42:52.043Z","updated_at":"2023-10-03T11:42:52.043Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/pkg/authn/kubernetes/go.sum","dependencies":[{"id":14080107096,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.26.0","direct":false,"kind":"runtime","optional":false},{"id":14080107097,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.34.0","direct":false,"kind":"runtime","optional":false},{"id":14080107098,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080107099,"package_name":"github.com/OneOfOne/xxhash","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":14080107100,"package_name":"github.com/antihax/optional","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080107101,"package_name":"github.com/buger/jsonparser","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080107102,"package_name":"github.com/census-instrumentation/opencensus-proto","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080107103,"package_name":"github.com/cespare/xxhash","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107104,"package_name":"github.com/client9/misspell","ecosystem":"go","requirements":"v0.3.4","direct":false,"kind":"runtime","optional":false},{"id":14080107105,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20191209042840-269d4d468f6f","direct":false,"kind":"runtime","optional":false},{"id":14080107106,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20201120205902-5459f2c99403","direct":false,"kind":"runtime","optional":false},{"id":14080107107,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20210312221358-fbca930ec8ed","direct":false,"kind":"runtime","optional":false},{"id":14080107108,"package_name":"github.com/creack/pty","ecosystem":"go","requirements":"v1.1.9","direct":false,"kind":"runtime","optional":false},{"id":14080107109,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107110,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080107111,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080107112,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080107113,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080107114,"package_name":"github.com/docopt/docopt-go","ecosystem":"go","requirements":"v0.0.0-20180111231733-ee0de3bc6815","direct":false,"kind":"runtime","optional":false},{"id":14080107115,"package_name":"github.com/emicklei/go-restful/v3","ecosystem":"go","requirements":"v3.10.2","direct":false,"kind":"runtime","optional":false},{"id":14080107116,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080107117,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.1-0.20191026205805-5f8ba28d4473","direct":false,"kind":"runtime","optional":false},{"id":14080107118,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.4","direct":false,"kind":"runtime","optional":false},{"id":14080107119,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20201210154907-fd9021fe5dad","direct":false,"kind":"runtime","optional":false},{"id":14080107120,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20210512163311-63b5d3c536b0","direct":false,"kind":"runtime","optional":false},{"id":14080107121,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107122,"package_name":"github.com/evanphx/json-patch","ecosystem":"go","requirements":"v4.12.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":14080107123,"package_name":"github.com/flowstack/go-jsonschema","ecosystem":"go","requirements":"v0.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080107124,"package_name":"github.com/ghodss/yaml","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080107125,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107126,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.4","direct":false,"kind":"runtime","optional":false},{"id":14080107127,"package_name":"github.com/go-openapi/jsonpointer","ecosystem":"go","requirements":"v0.19.6","direct":false,"kind":"runtime","optional":false},{"id":14080107128,"package_name":"github.com/go-openapi/jsonreference","ecosystem":"go","requirements":"v0.20.2","direct":false,"kind":"runtime","optional":false},{"id":14080107129,"package_name":"github.com/go-openapi/swag","ecosystem":"go","requirements":"v0.22.3","direct":false,"kind":"runtime","optional":false},{"id":14080107130,"package_name":"github.com/go-task/slim-sprig","ecosystem":"go","requirements":"v0.0.0-20210107165309-348f09dbbbc0","direct":false,"kind":"runtime","optional":false},{"id":14080107131,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080107132,"package_name":"github.com/golang/glog","ecosystem":"go","requirements":"v0.0.0-20160126235308-23def4e6c14b","direct":false,"kind":"runtime","optional":false},{"id":14080107133,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080107134,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107135,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080107136,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080107137,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.3","direct":false,"kind":"runtime","optional":false},{"id":14080107138,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":14080107139,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1.0.20200221234624-67d41d38c208","direct":false,"kind":"runtime","optional":false},{"id":14080107140,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.2","direct":false,"kind":"runtime","optional":false},{"id":14080107141,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.4.0.20200313231945-b860323f09d0","direct":false,"kind":"runtime","optional":false},{"id":14080107142,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080107143,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":14080107144,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.2","direct":false,"kind":"runtime","optional":false},{"id":14080107145,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.3","direct":false,"kind":"runtime","optional":false},{"id":14080107146,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080107147,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.2","direct":false,"kind":"runtime","optional":false},{"id":14080107148,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":false,"kind":"runtime","optional":false},{"id":14080107149,"package_name":"github.com/google/gnostic","ecosystem":"go","requirements":"v0.6.9","direct":false,"kind":"runtime","optional":false},{"id":14080107150,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107151,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080107152,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":14080107153,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080107154,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080107155,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":14080107156,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":14080107157,"package_name":"github.com/google/gofuzz","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080107158,"package_name":"github.com/google/gofuzz","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107159,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20210720184732-4bb14d4b1be1","direct":false,"kind":"runtime","optional":false},{"id":14080107160,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.1.2","direct":false,"kind":"runtime","optional":false},{"id":14080107161,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080107162,"package_name":"github.com/grpc-ecosystem/grpc-gateway","ecosystem":"go","requirements":"v1.16.0","direct":false,"kind":"runtime","optional":false},{"id":14080107163,"package_name":"github.com/josharian/intern","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080107165,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.12","direct":false,"kind":"runtime","optional":false},{"id":14080107166,"package_name":"github.com/kisielk/errcheck","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080107167,"package_name":"github.com/kisielk/gotool","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080107168,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107169,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080107171,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080107172,"package_name":"github.com/kr/pty","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":14080107174,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107175,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107176,"package_name":"github.com/mailru/easyjson","ecosystem":"go","requirements":"v0.7.7","direct":false,"kind":"runtime","optional":false},{"id":14080107178,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107179,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180228061459-e0a39a4cb421","direct":false,"kind":"runtime","optional":false},{"id":14080107181,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180306012644-bacd9c7ef1dd","direct":false,"kind":"runtime","optional":false},{"id":14080107182,"package_name":"github.com/modern-go/reflect2","ecosystem":"go","requirements":"v1.0.2","direct":false,"kind":"runtime","optional":false},{"id":14080107183,"package_name":"github.com/munnerz/goautoneg","ecosystem":"go","requirements":"v0.0.0-20191010083416-a7dc8b61c822","direct":false,"kind":"runtime","optional":false},{"id":14080107184,"package_name":"github.com/onsi/ginkgo/v2","ecosystem":"go","requirements":"v2.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080107185,"package_name":"github.com/onsi/gomega","ecosystem":"go","requirements":"v1.27.4","direct":false,"kind":"runtime","optional":false},{"id":14080107186,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080107187,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080107188,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":14080107189,"package_name":"github.com/prometheus/client_model","ecosystem":"go","requirements":"v0.0.0-20190812154241-14fe0d1b01d4","direct":false,"kind":"runtime","optional":false},{"id":14080107190,"package_name":"github.com/rogpeppe/fastuuid","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107191,"package_name":"github.com/rogpeppe/go-internal","ecosystem":"go","requirements":"v1.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080107192,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080107193,"package_name":"github.com/spaolacci/murmur3","ecosystem":"go","requirements":"v0.0.0-20180118202830-f09979ecbc72","direct":false,"kind":"runtime","optional":false},{"id":14080107194,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.3","direct":false,"kind":"runtime","optional":false},{"id":14080107195,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":false,"kind":"runtime","optional":false},{"id":14080107196,"package_name":"github.com/stoewer/go-strcase","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107197,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107198,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080107199,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":14080107200,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080107201,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":14080107202,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080107203,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":false,"kind":"runtime","optional":false},{"id":14080107204,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080107205,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.1","direct":false,"kind":"runtime","optional":false},{"id":14080107206,"package_name":"github.com/xeipuuv/gojsonpointer","ecosystem":"go","requirements":"v0.0.0-20180127040702-4e3ac2762d5f","direct":false,"kind":"runtime","optional":false},{"id":14080107207,"package_name":"github.com/xeipuuv/gojsonreference","ecosystem":"go","requirements":"v0.0.0-20180127040603-bd5ef7bd5415","direct":false,"kind":"runtime","optional":false},{"id":14080107208,"package_name":"github.com/xeipuuv/gojsonschema","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107209,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.1.27","direct":false,"kind":"runtime","optional":false},{"id":14080107210,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":14080107211,"package_name":"go.opentelemetry.io/proto/otlp","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":14080107212,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190308221718-c2843e01d9a2","direct":false,"kind":"runtime","optional":false},{"id":14080107213,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20191011191535-87dc89f01550","direct":false,"kind":"runtime","optional":false},{"id":14080107214,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20200622213623-75b288015ac9","direct":false,"kind":"runtime","optional":false},{"id":14080107215,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20190121172915-509febef88a4","direct":false,"kind":"runtime","optional":false},{"id":14080107216,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20181026193005-c67002cb31c3","direct":false,"kind":"runtime","optional":false},{"id":14080107217,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190227174305-5b3e6a55c961","direct":false,"kind":"runtime","optional":false},{"id":14080107218,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190313153728-d0100b6bd8b3","direct":false,"kind":"runtime","optional":false},{"id":14080107219,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":14080107220,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080107221,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180724234803-3673e40ba225","direct":false,"kind":"runtime","optional":false},{"id":14080107222,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180826012351-8a410e7b638d","direct":false,"kind":"runtime","optional":false},{"id":14080107223,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190108225652-1e06a53dbb7e","direct":false,"kind":"runtime","optional":false},{"id":14080107224,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190213061140-3a22650c66bd","direct":false,"kind":"runtime","optional":false},{"id":14080107225,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190311183353-d8887717615a","direct":false,"kind":"runtime","optional":false},{"id":14080107226,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190404232315-eb5bcb51f2a3","direct":false,"kind":"runtime","optional":false},{"id":14080107227,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190603091049-60506f45cf65","direct":false,"kind":"runtime","optional":false},{"id":14080107228,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190620200207-3b0461eec859","direct":false,"kind":"runtime","optional":false},{"id":14080107229,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200226121028-0de0cce0169b","direct":false,"kind":"runtime","optional":false},{"id":14080107230,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200822124328-c89045814202","direct":false,"kind":"runtime","optional":false},{"id":14080107231,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201021035429-f5854403a974","direct":false,"kind":"runtime","optional":false},{"id":14080107232,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210405180319-a5a99cb37ef4","direct":false,"kind":"runtime","optional":false},{"id":14080107233,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210805182204-aaa1db679c0d","direct":false,"kind":"runtime","optional":false},{"id":14080107234,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.10.0","direct":false,"kind":"runtime","optional":false},{"id":14080107235,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20180821212333-d2e6202438be","direct":false,"kind":"runtime","optional":false},{"id":14080107236,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20200107190931-bf48bf16ab8d","direct":false,"kind":"runtime","optional":false},{"id":14080107237,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080107238,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20180314180146-1d60e4601c6f","direct":false,"kind":"runtime","optional":false},{"id":14080107239,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181108010431-42b317875d0f","direct":false,"kind":"runtime","optional":false},{"id":14080107240,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181221193216-37e7f081c4d4","direct":false,"kind":"runtime","optional":false},{"id":14080107241,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190423024810-112230192c58","direct":false,"kind":"runtime","optional":false},{"id":14080107242,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190911185100-cd5d95a43a6e","direct":false,"kind":"runtime","optional":false},{"id":14080107243,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20201020160332-67f06af15bc9","direct":false,"kind":"runtime","optional":false},{"id":14080107244,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20180830151530-49385e6e1522","direct":false,"kind":"runtime","optional":false},{"id":14080107245,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190215142949-d0b11bdaac8a","direct":false,"kind":"runtime","optional":false},{"id":14080107246,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190412213103-97732733099d","direct":false,"kind":"runtime","optional":false},{"id":14080107247,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200323222414-85ca7c5b95cd","direct":false,"kind":"runtime","optional":false},{"id":14080107248,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200930185726-fdedc70b468f","direct":false,"kind":"runtime","optional":false},{"id":14080107249,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20201119102817-f84b799fce68","direct":false,"kind":"runtime","optional":false},{"id":14080107250,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210119212857-b64e53b001e4","direct":false,"kind":"runtime","optional":false},{"id":14080107251,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210330210617-4fbd30eecc44","direct":false,"kind":"runtime","optional":false},{"id":14080107252,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210423082822-04245dca01da","direct":false,"kind":"runtime","optional":false},{"id":14080107253,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210510120138-977fb7262007","direct":false,"kind":"runtime","optional":false},{"id":14080107254,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220715151400-c0bba94af5f8","direct":false,"kind":"runtime","optional":false},{"id":14080107255,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080107256,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20201126162022-7de9c90e9dd1","direct":false,"kind":"runtime","optional":false},{"id":14080107257,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":14080107258,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080107259,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.2","direct":false,"kind":"runtime","optional":false},{"id":14080107260,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.3","direct":false,"kind":"runtime","optional":false},{"id":14080107261,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.5","direct":false,"kind":"runtime","optional":false},{"id":14080107262,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.6","direct":false,"kind":"runtime","optional":false},{"id":14080107263,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":14080107264,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":14080107265,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20180917221912-90fa682c2a6e","direct":false,"kind":"runtime","optional":false},{"id":14080107266,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190114222345-bf090417da8b","direct":false,"kind":"runtime","optional":false},{"id":14080107267,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190226205152-f727befe758c","direct":false,"kind":"runtime","optional":false},{"id":14080107268,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190311212946-11955173bddd","direct":false,"kind":"runtime","optional":false},{"id":14080107269,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190524140312-2c0ae7006135","direct":false,"kind":"runtime","optional":false},{"id":14080107270,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191119224855-298f0cb1881e","direct":false,"kind":"runtime","optional":false},{"id":14080107271,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200619180055-7c47624df98f","direct":false,"kind":"runtime","optional":false},{"id":14080107272,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20210106214847-113979e3529a","direct":false,"kind":"runtime","optional":false},{"id":14080107273,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107274,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080107275,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20190717185122-a985d3407aa7","direct":false,"kind":"runtime","optional":false},{"id":14080107276,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191011141410-1b5146add898","direct":false,"kind":"runtime","optional":false},{"id":14080107277,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":14080107278,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20200804184101-5ec99f83aff1","direct":false,"kind":"runtime","optional":false},{"id":14080107279,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107280,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080107281,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":false,"kind":"runtime","optional":false},{"id":14080107282,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20180817151627-c66870c02cf8","direct":false,"kind":"runtime","optional":false},{"id":14080107283,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190819201941-24fa4b261c55","direct":false,"kind":"runtime","optional":false},{"id":14080107284,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200513103714-09dca8ec2884","direct":false,"kind":"runtime","optional":false},{"id":14080107285,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200526211855-cb27e3aa2013","direct":false,"kind":"runtime","optional":false},{"id":14080107286,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20220107163113-42d7afdf6368","direct":false,"kind":"runtime","optional":false},{"id":14080107287,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.19.0","direct":false,"kind":"runtime","optional":false},{"id":14080107288,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":14080107289,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.25.1","direct":false,"kind":"runtime","optional":false},{"id":14080107290,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.27.0","direct":false,"kind":"runtime","optional":false},{"id":14080107291,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.33.1","direct":false,"kind":"runtime","optional":false},{"id":14080107292,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.36.0","direct":false,"kind":"runtime","optional":false},{"id":14080107293,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.40.0","direct":false,"kind":"runtime","optional":false},{"id":14080107294,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200109180630-ec00e32a8dfd","direct":false,"kind":"runtime","optional":false},{"id":14080107295,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200221191635-4d8936d0db64","direct":false,"kind":"runtime","optional":false},{"id":14080107296,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200228230310-ab0ca4ff8a60","direct":false,"kind":"runtime","optional":false},{"id":14080107297,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.20.1-0.20200309200217-e05f789c0967","direct":false,"kind":"runtime","optional":false},{"id":14080107298,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.21.0","direct":false,"kind":"runtime","optional":false},{"id":14080107299,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.22.0","direct":false,"kind":"runtime","optional":false},{"id":14080107300,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":14080107301,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.1-0.20200526195155-81db48ad09cc","direct":false,"kind":"runtime","optional":false},{"id":14080107302,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.25.0","direct":false,"kind":"runtime","optional":false},{"id":14080107303,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":14080107304,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":14080107305,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080107306,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":false,"kind":"runtime","optional":false},{"id":14080107307,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":14080107308,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20190902080502-41f04d3bba15","direct":false,"kind":"runtime","optional":false},{"id":14080107309,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20201130134442-10cb98267c6c","direct":false,"kind":"runtime","optional":false},{"id":14080107310,"package_name":"gopkg.in/inf.v0","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":14080107311,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.2","direct":false,"kind":"runtime","optional":false},{"id":14080107312,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.3","direct":false,"kind":"runtime","optional":false},{"id":14080107313,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.8","direct":false,"kind":"runtime","optional":false},{"id":14080107314,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.4.0","direct":false,"kind":"runtime","optional":false},{"id":14080107315,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false},{"id":14080107316,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200615113413-eeeca48fe776","direct":false,"kind":"runtime","optional":false},{"id":14080107317,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":false,"kind":"runtime","optional":false},{"id":14080107318,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.1.0","direct":false,"kind":"runtime","optional":false},{"id":14080107319,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190102054323-c2f93a96b099","direct":false,"kind":"runtime","optional":false},{"id":14080107320,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190523083050-ea95bdfd59fc","direct":false,"kind":"runtime","optional":false},{"id":14080107321,"package_name":"k8s.io/api","ecosystem":"go","requirements":"v0.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080107322,"package_name":"k8s.io/apimachinery","ecosystem":"go","requirements":"v0.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080107323,"package_name":"k8s.io/client-go","ecosystem":"go","requirements":"v0.27.1","direct":false,"kind":"runtime","optional":false},{"id":14080107324,"package_name":"k8s.io/klog/v2","ecosystem":"go","requirements":"v2.100.1","direct":false,"kind":"runtime","optional":false},{"id":14080107325,"package_name":"k8s.io/kube-openapi","ecosystem":"go","requirements":"v0.0.0-20230515203736-54b630e78af5","direct":false,"kind":"runtime","optional":false},{"id":14080107326,"package_name":"k8s.io/utils","ecosystem":"go","requirements":"v0.0.0-20230505201702-9f6742963106","direct":false,"kind":"runtime","optional":false},{"id":14080107327,"package_name":"sigs.k8s.io/json","ecosystem":"go","requirements":"v0.0.0-20221116044647-bc3834ca7abd","direct":false,"kind":"runtime","optional":false},{"id":14080107328,"package_name":"sigs.k8s.io/structured-merge-diff/v4","ecosystem":"go","requirements":"v4.2.3","direct":false,"kind":"runtime","optional":false},{"id":14080107329,"package_name":"sigs.k8s.io/yaml","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"docker","filepath":"cmd/gcrane/Dockerfile","sha":null,"kind":"manifest","created_at":"2025-12-11T10:04:20.168Z","updated_at":"2025-12-11T10:04:20.168Z","repository_link":"https://github.com/google/go-containerregistry/blob/main/cmd/gcrane/Dockerfile","dependencies":[{"id":25764662788,"package_name":"gcr.io/distroless/static-debian12","ecosystem":"docker","requirements":"nonroot","direct":true,"kind":"build","optional":false}]}],"score":35.89716968422348,"created_at":"2026-07-08T04:58:46.716Z","updated_at":"2026-07-23T12:05:47.499Z","avatar_url":"https://github.com/google.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/377609","html_url":"https://summary.ecosyste.ms/projects/377609"}