OpenGrokSource-code search and cross-reference engine.
Source-code search and cross-reference engine.
OpenGrok is a Java source-code search and cross-reference engine for exploring codebases. It indexes source trees so developers can search code, follow cross-references and navigate files alongside supported version-control histories. The application is deployed as a web-based source browser, with a Docker distribution available for running the service in a container.
OpenGrok README · Reviewed 2026-10-27
- 01 / Feature noteSource cross-references
Navigate indexed source code through cross-references between relevant program elements.
Feature source ↗ - 02 / Feature noteVersion-control context
Browse supported source-control histories alongside indexed source files.
Feature source ↗
GitHub stars
5,026
Detected license
Unknown
i
Not reported by GitHub.
Verify against official terms.
Repository created
2013-01-07
Repository push
2026-10-26
2013-01-07GitHub release
2026-10-12 · 1.14.20Repository push
2026-10-26
GitHub stars
Unknown
i
Cached history uses a different month window; chart withheld until aligned.
Latest attempt: ok · Checked 2026-10-15T23:34:55.975088+00:00 · Last successful fetch 2026-10-15T23:34:55.975088+00:00 · Provider source
Hacker News stories
Unknown
i
OpenSSF Scorecard
5.2/10
Scanned 2026-10-26 · 13 scored / 14 returned
i
- Maintained · 10/10
30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
- Dangerous-Workflow · 10/10
no dangerous workflow patterns detected
- Security-Policy · 10/10
security policy file detected
- Packaging · Inconclusive
packaging workflow not detected
- Code-Review · 2/10
Found 3/15 approved changesets -- score normalized to 2
- Token-Permissions · 0/10
detected GitHub workflow tokens with excessive permissions
- Binary-Artifacts · 9/10
binaries present in source code
- CII-Best-Practices · 0/10
no effort to earn an OpenSSF best practices badge detected
- License · 9/10
license file detected
- Fuzzing · 0/10
project is not fuzzed
- Pinned-Dependencies · 3/10
dependency not pinned by hash detected -- score normalized to 3
- Signed-Releases · 0/10
Project has not signed or included provenance with any releases.
- Branch-Protection · 3/10
branch protection is not maximal on development and all release branches
- SAST · 10/10
SAST tool detected
Repository commit 03b382868424 · Scorecard v5.6.0
Checked 2026-11-03T08:48:35Z · Last successful fetch 2026-11-03T08:48:35Z · Value fetched 2026-11-03T08:48:35Z · Provider source
GitHub release
Published 2026-10-12
i
Checked 2026-11-04T04:26:56Z · Last successful fetch 2026-11-04T04:26:56Z · Value fetched 2026-11-04T04:26:56Z · Provider source
Unknown

