Awesome Open

Project record

OpenCanary

OpenCanaryModular network honeypot.BSD-3-Clause
Field notes / 129OpenCanary
I / Function

Modular network honeypot.

OpenCanary runs a network honeypot that imitates services and sends alerts when someone interacts with them. Administrators choose protocol modules and logging options through a JSON configuration file. The Python daemon can run directly on Linux or macOS, with a Docker route for Linux hosts; optional capabilities include SNMP, Samba-backed file sharing and Linux port-scan detection.

OpenCanary README · Reviewed 2026-11-03

A hollow seedpod links several openings to a tall red warning petal by a taut filament.
Awesome Open* · Field recordOpenCanaryOP-B6EF8A98 · Folio 129Domain: Security & Privacy
  1. 01 / Feature noteService decoys

    Enable protocol modules to imitate network-accessible services and alert on interactions.

    Feature source ↗
  2. 02 / Feature noteOptional detection modules

    SNMP uses Scapy, file-share emulation uses Samba, and port-scan detection requires Linux iptables.

    Feature source ↗
II / Repository record

GitHub stars

3,092

Detected license

BSD-3-Clause

Repository created

2015-08-05

Repository push

2026-10-27

III / Observations & evidence

GitHub stars

Unknown

i
Window mismatch; awaiting refresh

Cached history uses a different month window; chart withheld until aligned.

Latest attempt: ok · Checked 2026-10-16T00:57:19.371756+00:00 · Last successful fetch 2026-10-16T00:57:19.371756+00:00 · Provider source

Hacker News stories

Unknown

i
Not recorded

OpenSSF Scorecard

6.3/10

Scanned 2026-10-26 · 12 scored / 14 returned

i
Partial
  • Code-Review · 9/10

    Found 27/28 approved changesets -- score normalized to 9

  • Maintained · 10/10

    15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

  • Dangerous-Workflow · 10/10

    no dangerous workflow patterns detected

  • Binary-Artifacts · 10/10

    no binaries found in the repo

  • Token-Permissions · 0/10

    detected GitHub workflow tokens with excessive permissions

  • CII-Best-Practices · 0/10

    no effort to earn an OpenSSF best practices badge detected

  • Fuzzing · 0/10

    project is not fuzzed

  • Pinned-Dependencies · 0/10

    dependency not pinned by hash detected -- score normalized to 0

  • License · 10/10

    license file detected

  • Signed-Releases · Inconclusive

    no releases found

  • Branch-Protection · Inconclusive

    internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md

  • Security-Policy · 10/10

    security policy file detected

  • Packaging · 10/10

    packaging workflow detected

  • SAST · 0/10

    SAST tool is not run on all commits -- score normalized to 0

Repository commit 55a90395fb42 · Scorecard v5.6.0

Checked 2026-11-03T08:48:35Z · Last successful fetch 2026-11-03T08:48:35Z · Value fetched 2026-11-03T08:48:35Z · Provider source

IV / Release record

GitHub release

v0.9.10

Published 2026-09-21

i
Available

Checked 2026-11-04T04:26:56Z · Last successful fetch 2026-11-04T04:26:56Z · Value fetched 2026-11-04T04:26:56Z · Provider source

V / Where it runs

Unknown

i
Not reviewed