GitHub

openshift/operator-framework-olm

72 forks

18 stars

Description

A management framework for extending Kubernetes with Operators

Homepage

https://github.com/openshift/operator-framework-olm

Project metadata as of July 22, 2025.

Related Packages

1

A related package is a package that declares this repository in its metadata. The list of packages is ordered by package names alphabetically.

System	Package
Go	github.com/openshift/operator-framework-olm

Show 10 per page

OpenSSF scorecard

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

View information about checks and how to fix failures.

Score

6.8/10

Scorecard as of July 7, 2025.

Code-Review

10/10

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

Reasoning

all changesets reviewed

Maintained

10/10

Determines if the project is "actively maintained".

Reasoning

30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

CII-Best-Practices

0/10

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

Reasoning

no effort to earn an OpenSSF best practices badge detected

License

10/10

Determines if the project has defined a license.

Reasoning

license file detected

Security-Policy

10/10

Determines if the project has published a security policy.

Reasoning

security policy file detected

Fuzzing

0/10

Determines if the project uses fuzzing.

Reasoning

project is not fuzzed

SAST

0/10

Determines if the project uses static code analysis.

Reasoning

SAST tool is not run on all commits -- score normalized to 0

Binary-Artifacts

10/10

Determines if the project has generated executable (binary) artifacts in the source repository.

Reasoning

no binaries found in the repo

Pinned-Dependencies

0/10

Determines if the project has declared and pinned the dependencies of its build process.

Reasoning

dependency not pinned by hash detected -- score normalized to 0

This site uses cookies from Google to deliver its services and to analyze traffic.

Pinned-Dependencies

Info: Possibly incomplete results: error parsing shell code: "foo(" must be followed by ): vendor/sigs.k8s.io/controller-runtime/Makefile:0

Warn: containerImage not pinned by hash: base.Dockerfile:3

Warn: containerImage not pinned by hash: codegen.Dockerfile:1: pin your Docker image by updating golang:1.22-alpine to golang:1.22-alpine@sha256:1699c10032ca2582ec89a24a1312d986a3f094aed3d5c1147b19880afe40e052

Warn: containerImage not pinned by hash: e2e.Dockerfile:2: pin your Docker image by updating busybox to busybox@sha256:f85340bf132ae937d2c2a763b8335c9bab35d6e8293f70f606b9c6178d84f42b

Warn: containerImage not pinned by hash: operator-framework-tools.Dockerfile:1

Warn: containerImage not pinned by hash: operator-framework-tools.Dockerfile:8

Warn: containerImage not pinned by hash: operator-framework-tools.Dockerfile:15

Warn: containerImage not pinned by hash: operator-lifecycle-manager.Dockerfile:1

Warn: containerImage not pinned by hash: operator-lifecycle-manager.Dockerfile:21

Warn: containerImage not pinned by hash: operator-registry.Dockerfile:1

Warn: containerImage not pinned by hash: operator-registry.Dockerfile:14

Warn: containerImage not pinned by hash: staging/operator-lifecycle-manager/Dockerfile:1: pin your Docker image by updating gcr.io/distroless/static:debug to gcr.io/distroless/static:debug@sha256:112141358ce173d72800bb0e85b4d9dda7505ffc37203e70e475425d5a0d097b

Warn: containerImage not pinned by hash: staging/operator-lifecycle-manager/test/e2e/data/kiali-image-bundle/Dockerfile:3: pin your Docker image by updating registry.access.redhat.com/ubi8/ubi-minimal to registry.access.redhat.com/ubi8/ubi-minimal@sha256:9746f7ac575b4427fc9635f8f575289870a8b30dabf77ee992ae4c2f1e121cce

Warn: containerImage not pinned by hash: staging/operator-lifecycle-manager/test/e2e/data/kiali-image-registry/Dockerfile:2: pin your Docker image by updating quay.io/operator-framework/operator-registry-server to quay.io/operator-framework/operator-registry-server@sha256:d1d7f6fa945d69de30830cc1b037337dabca9fa51cc6ff7e21286a50ee20ad8b

Warn: containerImage not pinned by hash: staging/operator-lifecycle-manager/test/e2e/skopeo.Dockerfile:1: pin your Docker image by updating fedora:31 to fedora:31@sha256:444773966064dcc3c268d8b496e76dbbbb49d16586d5a969c4082579e6b77616

Warn: containerImage not pinned by hash: staging/operator-registry/configmap-registry.Dockerfile:1

Warn: containerImage not pinned by hash: staging/operator-registry/configmap-registry.Dockerfile:2

Warn: containerImage not pinned by hash: staging/operator-registry/fbc-dir/file-based-catalog.Dockerfile:3: pin your Docker image by updating quay.io/operator-framework/opm:latest to quay.io/operator-framework/opm:latest@sha256:a557ae54b41fee9e0243261f8cf57cf392d6b2b22b82ff40fef1ab45b66683e8

Warn: containerImage not pinned by hash: staging/operator-registry/index.Dockerfile:1

Warn: containerImage not pinned by hash: staging/operator-registry/opm-example.Dockerfile:3: pin your Docker image by updating quay.io/operator-framework/opm:latest to quay.io/operator-framework/opm:latest@sha256:a557ae54b41fee9e0243261f8cf57cf392d6b2b22b82ff40fef1ab45b66683e8

Warn: containerImage not pinned by hash: staging/operator-registry/registry.Dockerfile:1

Warn: containerImage not pinned by hash: staging/operator-registry/release/goreleaser.opm.Dockerfile:5

Warn: containerImage not pinned by hash: staging/operator-registry/release/goreleaser.opm.Dockerfile:6: pin your Docker image by updating gcr.io/distroless/static:debug to gcr.io/distroless/static:debug@sha256:112141358ce173d72800bb0e85b4d9dda7505ffc37203e70e475425d5a0d097b

Warn: containerImage not pinned by hash: staging/operator-registry/upstream-builder.Dockerfile:1

Warn: containerImage not pinned by hash: staging/operator-registry/upstream-builder.Dockerfile:12: pin your Docker image by updating alpine:3 to alpine:3@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715

Warn: containerImage not pinned by hash: staging/operator-registry/upstream-example.Dockerfile:1

Warn: containerImage not pinned by hash: staging/operator-registry/upstream-opm-builder.Dockerfile:6

Warn: containerImage not pinned by hash: staging/operator-registry/upstream-opm-builder.Dockerfile:21: pin your Docker image by updating quay.io/operator-framework/alpine to quay.io/operator-framework/alpine@sha256:be9bdc0ef8e96dbc428dc189b31e2e3b05523d96d12ed627c37aa2936653258c

Warn: goCommand not pinned by hash: vendor/github.com/googleapis/gnostic/COMPILE-PROTOS.sh:18

Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10

Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/regenerate.sh:35

Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:37

Info: 0 out of 27 containerImage dependencies pinned

Info: 2 out of 6 goCommand dependencies pinned