Awesome Open

Project record

OpenChoreo

OpenChoreoInternal developer platform for Kubernetes.Apache-2.0
Field notes / 141OpenChoreo
I / Function

Internal developer platform for Kubernetes.

OpenChoreo lets developers define services, workers, scheduled jobs, endpoints and dependencies through higher-level Kubernetes resources. Platform teams configure component types and deployment workflows, while developers use a Backstage portal, command line or GitOps. Its Kubernetes-based architecture separates workload execution, control and observability, with metrics, logs and traces plus an optional build plane.

OpenChoreo: official README · Reviewed 2026-10-16

Awesome Open* · Field recordOpenChoreoOP-0DFA33AC · Folio 141Domain: Infrastructure & DevOps
II / Repository record

GitHub stars

1,759

Detected license

Apache-2.0

Repository created

2025-02-28

Repository push

2026-11-04

III / Observations & evidence

GitHub stars

Unknown

i
Window mismatch; awaiting refresh

Cached history uses a different month window; chart withheld until aligned.

Latest attempt: ok · Checked 2026-10-16T05:36:37.585640+00:00 · Last successful fetch 2026-10-16T05:36:37.585640+00:00 · Provider source

Hacker News stories

Unknown

i
Not recorded

OpenSSF Scorecard

6.8/10

Scanned 2026-11-02 · 17 scored / 18 returned

i
Partial
  • Code-Review · 10/10

    all changesets reviewed

  • Dependency-Update-Tool · 10/10

    update tool detected

  • Maintained · 10/10

    30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

  • Security-Policy · 10/10

    security policy file detected

  • Token-Permissions · 0/10

    detected GitHub workflow tokens with excessive permissions

  • Dangerous-Workflow · 0/10

    dangerous workflow patterns detected

  • Binary-Artifacts · 10/10

    no binaries found in the repo

  • CII-Best-Practices · 5/10

    badge detected: Passing

  • License · 10/10

    license file detected

  • Pinned-Dependencies · 10/10

    all dependencies are pinned

  • Fuzzing · 10/10

    project is fuzzed

  • Vulnerabilities · 0/10

    18 existing vulnerabilities detected

  • Signed-Releases · 8/10

    5 out of the last 5 releases have a total of 5 signed artifacts.

  • Packaging · Inconclusive

    packaging workflow not detected

  • Branch-Protection · 4/10

    branch protection is not maximal on development and all release branches

  • SAST · 10/10

    SAST tool is run on all commits

  • CI-Tests · 10/10

    30 out of 30 merged PRs checked by a CI test -- score normalized to 10

  • Contributors · 10/10

    project has 24 contributing companies or organizations

Repository commit e48195c16330 · Scorecard v5.6.0

Checked 2026-11-03T07:55:50Z · Last successful fetch 2026-11-03T07:55:50Z · Value fetched 2026-11-03T07:55:50Z · Provider source

IV / Release record

GitHub release

v1.3.3

Published 2026-10-29

i
Available

Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source

V / Where it runs

Unknown

i
Not reviewed