An open API service providing repository metadata for many open source software ecosystems.

GitHub / cirosantilli / linux-kernel-module-cheat

The perfect emulation setup to study and develop the Linux kernel, kernel modules, QEMU, gem5 and x86_64, ARMv7 and ARMv8 userland and baremetal assembly, ANSI C, C++ and POSIX. GDB step debug and KGDB just work. Powered by Buildroot and crosstool-NG. Highly automated. Thoroughly documented. Automated tests. "Tested" in an Ubuntu 24.04 host.

JSON API: http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cirosantilli%2Flinux-kernel-module-cheat
PURL: pkg:github/cirosantilli/linux-kernel-module-cheat

Stars: 4,372
Forks: 618
Open issues: 71

License: gpl-3.0
Language: Python
Size: 11.1 MB
Dependencies parsed at: Pending

Created at: about 9 years ago
Updated at: 27 days ago
Pushed at: 4 months ago
Last synced at: 25 days ago

Commit Stats

Commits: 1774
Authors: 9
Mean commits per author: 197.11
Development Distribution Score: 0.005
More commit stats: https://commits.ecosyste.ms/hosts/GitHub/repositories/cirosantilli/linux-kernel-module-cheat

Topics: buildroot, gdb, kgdb, linux-kernel, linux-kernel-module, qemu

Funding Links https://github.com/sponsors/cirosantilli

OpenSSF Scorecard report

1.4

Overall Score

10/60 High Risk
0/40 Medium Risk
10/20 Low Risk
Generated on August 11, 2025 | Scorecard vv5.2.1-40-gf6ed084d
Security Checks
10/10
Binary-Artifacts
High Risk

no binaries found in the repo

Determines if the project has generated executable (binary) artifacts in the source repository.

10/10
License
Low Risk

license file detected

Determines if the project has defined a license.

Show details
ℹ️ Info: project has a license file: LICENSE.txt:0
ℹ️ Info: FSF or OSI recognized license: GNU General Public License v3.0: LICENSE.txt:0
0/10
Branch-Protection
High Risk

branch protection not enabled on development/release branches

Determines if the default and release branches are protected with GitHub's branch protection settings.

Show details
⚠️ Warn: branch protection not enabled for branch 'master'
0/10
CII-Best-Practices
Low Risk

no effort to earn an OpenSSF best practices badge detected

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0/10
Code-Review
High Risk

Found 0/30 approved changesets -- score normalized to 0

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0/10
Fuzzing
Medium Risk

project is not fuzzed

Determines if the project uses fuzzing.

Show details
⚠️ Warn: no fuzzer integrations found
0/10
Maintained
High Risk

0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

Determines if the project is "actively maintained".

0/10
Pinned-Dependencies
Medium Risk

dependency not pinned by hash detected -- score normalized to 0

Determines if the project has declared and pinned the dependencies of its build process.

Show details
⚠️ Warn: containerImage not pinned by hash: Dockerfile:2: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214
⚠️ Warn: pipCommand not pinned by hash: setup:34
ℹ️ Info: 0 out of 1 containerImage dependencies pinned
ℹ️ Info: 0 out of 1 pipCommand dependencies pinned
0/10
SAST
Medium Risk

no SAST tool detected

Determines if the project uses static code analysis.

Show details
⚠️ Warn: no pull requests merged into dev branch
0/10
Security-Policy
Medium Risk

security policy file not detected

Determines if the project has published a security policy.

Show details
⚠️ Warn: no security policy file detected
⚠️ Warn: no security file to analyze
⚠️ Warn: no security file to analyze
⚠️ Warn: no security file to analyze
0/10
Signed-Releases
High Risk

Project has not signed or included provenance with any releases.

Determines if the project cryptographically signs release artifacts.

Show details
⚠️ Warn: release artifact v3.0 not signed: https://api.github.com/repos/cirosantilli/linux-kernel-module-cheat/releases/15105578
⚠️ Warn: release artifact v3.0-rc1 not signed: https://api.github.com/repos/cirosantilli/linux-kernel-module-cheat/releases/15074929
⚠️ Warn: release artifact sha-c53ccb02782e6b5ba94c38c72597101cde86c4ff not signed: https://api.github.com/repos/cirosantilli/linux-kernel-module-cheat/releases/13045857
⚠️ Warn: release artifact v3.0 does not have provenance: https://api.github.com/repos/cirosantilli/linux-kernel-module-cheat/releases/15105578
⚠️ Warn: release artifact v3.0-rc1 does not have provenance: https://api.github.com/repos/cirosantilli/linux-kernel-module-cheat/releases/15074929
⚠️ Warn: release artifact sha-c53ccb02782e6b5ba94c38c72597101cde86c4ff does not have provenance: https://api.github.com/repos/cirosantilli/linux-kernel-module-cheat/releases/13045857
0/10
Vulnerabilities
High Risk

54 existing vulnerabilities detected

Determines if the project has open, known unfixed vulnerabilities.

Show details
⚠️ Warn: Project is vulnerable to: GHSA-cr5q-6q9f-rq6q
⚠️ Warn: Project is vulnerable to: GHSA-7vh7-fw88-wj87
⚠️ Warn: Project is vulnerable to: GHSA-353f-x4gh-cqq8
⚠️ Warn: Project is vulnerable to: GHSA-5w6v-399v-w3cc
⚠️ Warn: Project is vulnerable to: GHSA-mrxw-mxhj-p664
⚠️ Warn: Project is vulnerable to: GHSA-r95h-9x8f-r3f7
⚠️ Warn: Project is vulnerable to: GHSA-vvfq-8hwr-qm4m
⚠️ Warn: Project is vulnerable to: GHSA-xc9x-jj77-9p9j
⚠️ Warn: Project is vulnerable to: GHSA-2rxp-v6pw-ch6m
⚠️ Warn: Project is vulnerable to: GHSA-4xqq-m2hx-25v8
⚠️ Warn: Project is vulnerable to: GHSA-5866-49gr-22v4
⚠️ Warn: Project is vulnerable to: GHSA-r55c-59qm-vjw6
⚠️ Warn: Project is vulnerable to: GHSA-vg3r-rm7w-2xgh
⚠️ Warn: Project is vulnerable to: GHSA-vmwr-mc7x-5vc3
⚠️ Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf
⚠️ Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
⚠️ Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
⚠️ Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
⚠️ Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
⚠️ Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
⚠️ Warn: Project is vulnerable to: GHSA-4gxf-g5gf-22h4
⚠️ Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
⚠️ Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
⚠️ Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4
⚠️ Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
⚠️ Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
⚠️ Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
⚠️ Warn: Project is vulnerable to: GHSA-8hfj-j24r-96c4
⚠️ Warn: Project is vulnerable to: GHSA-wc69-rhjr-hc9g
⚠️ Warn: Project is vulnerable to: GHSA-56x4-j7p9-fcf9
⚠️ Warn: Project is vulnerable to: GHSA-v78c-4p63-2j6c
⚠️ Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
⚠️ Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
⚠️ Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
⚠️ Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
⚠️ Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
⚠️ Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
⚠️ Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
⚠️ Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
⚠️ Warn: Project is vulnerable to: GHSA-wrh9-cjv3-2hpw
⚠️ Warn: Project is vulnerable to: GHSA-8c25-f3mj-v6h8
⚠️ Warn: Project is vulnerable to: GHSA-vqfx-gj96-3w95
⚠️ Warn: Project is vulnerable to: GHSA-f598-mfpv-gmfx
⚠️ Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
⚠️ Warn: Project is vulnerable to: GHSA-9qrh-qjmc-5w2p
⚠️ Warn: Project is vulnerable to: GHSA-jqv5-7xpx-qj74
⚠️ Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
⚠️ Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
⚠️ Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
⚠️ Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
⚠️ Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
⚠️ Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
⚠️ Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
⚠️ Warn: Project is vulnerable to: GHSA-qgmg-gppg-76g5
N/A
Dangerous-Workflow
Not Applicable

no workflows found

Determines if the project's GitHub Action workflows avoid dangerous patterns.

N/A
Packaging
Not Applicable

packaging workflow not detected

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

Show details
⚠️ Warn: no GitHub/GitLab publishing workflow detected.
N/A
Token-Permissions
Not Applicable

No tokens found

Determines if the project's workflows follow the principle of least privilege.