Generated from configs/governance/upstream-registry.json. Do not edit this file manually.
| ID | Kind | Role | Source | Pin | Owner | Compat Group | Contract Kind | Status |
|---|---|---|---|---|---|---|---|---|
ci-node-base-image |
image |
ci-base-runtime | docker.io/library/node |
20-bookworm-slim@sha256:eef3816042c0f522a2ca9655c1947ca6f97c908b0c227aa50e19432646342ab7 |
@platform |
ci-base-toolchain |
public_contract |
active |
ci-python-base-image |
image |
ci-python-runtime | docker.io/library/python |
3.11-slim-bookworm@sha256:8404ed8464ae7275b5c13a00c6edd2e027c6560a1f74bd4c7dee39f5d00f9352 |
@platform |
ci-base-toolchain |
public_contract |
active |
uv-binary |
binary |
python-package-manager | https://github.com/astral-sh/uv/releases |
0.8.15 |
@platform |
ci-base-toolchain |
public_contract |
active |
actionlint-binary |
binary |
workflow-lint | https://github.com/rhysd/actionlint/releases |
1.7.11 |
@platform |
ci-base-toolchain |
public_contract |
active |
gitleaks-binary |
binary |
secret-scan | https://github.com/gitleaks/gitleaks/releases |
8.24.2 |
@platform |
ci-base-toolchain |
public_contract |
active |
k6-binary |
binary |
load-test-cli | https://github.com/grafana/k6/releases |
0.49.0 |
@platform |
browser-and-load-tooling |
public_contract |
active |
semgrep-cli |
binary |
static-analysis | https://pypi.org/project/semgrep/ |
1.118.0 |
@platform |
ci-base-toolchain |
public_contract |
active |
curlconverter-cli |
binary |
thirdparty-wrapper-cli | npm:curlconverter |
4.12.0 |
@automation |
thirdparty-wrapper-tooling |
wrapper_cli |
active |
har-to-k6-cli |
binary |
thirdparty-wrapper-cli | npm:har-to-k6 |
0.14.10 |
@automation |
thirdparty-wrapper-tooling |
wrapper_cli |
active |
playwright-cli |
sdk |
browser-automation-runtime | npm:playwright |
1.59.1 |
@qa-platform |
browser-and-load-tooling |
sdk_surface |
active |
mcp-sdk |
sdk |
mcp-protocol-surface | npm:@modelcontextprotocol/sdk |
1.28.0 |
@platform |
mcp-runtime |
sdk_surface |
active |
gemini-sdk |
sdk |
automation-llm-runtime | npm:@google/genai |
1.42.0 |
@automation |
automation-ai |
sdk_surface |
active |
upstream-repo-binding |
repo |
mainline-upstream-audit | configs/upstream/source.yaml |
remote=upstream,branch=main |
@platform |
upstream-audit |
repo_binding |
active |