Bump the dotnet group with 6 updates

[dependabot]

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.19 to 9.0.20.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

9.0.20

Release

What's Changed

• [release/9.0] Update branding to 9.0.20 by @​dotnet-bot in [release/9.0] Update branding to 9.0.20 dotnet/aspnetcore#68236
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67897
• [release/9.0] Backport FormsInputDateTest fixes by @​ilonatommy in [release/9.0] Backport FormsInputDateTest fixes dotnet/aspnetcore#68126
• [release/9.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 dotnet/aspnetcore#68172
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68188
• [release/9.0] Quarantine System_UsesProvidedCertificateNotFromStore by @​wtgodbe in [release/9.0] Quarantine System_UsesProvidedCertificateNotFromStore dotnet/aspnetcore#68243
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68245
• [release/9.0] Update RepoTasksSystemSecurityCryptographyXmlVersion to 8.0.4 by @​wtgodbe in [release/9.0] Update RepoTasksSystemSecurityCryptographyXmlVersion to 8.0.4 dotnet/aspnetcore#68231
• [9.0] Fix Debian package descriptions by @​wtgodbe in [9.0] Fix Debian package descriptions dotnet/aspnetcore#68256
• Remove Publish-Build-Assets variable group from release/9.0 by @​missymessa in Remove Publish-Build-Assets variable group from release/9.0 dotnet/aspnetcore#68266
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#68308
• [release/9.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @​Youssef1313 with @​Copilot in [release/9.0] Drop Microsoft.AspNetCore.Grpc.Swagger dotnet/aspnetcore#67954
• Merging internal commits for release/9.0 by @​dotnet-bot in Merging internal commits for release/9.0 dotnet/aspnetcore#68362
• [release/9.0] Update OpenAPI to latest by @​Youssef1313 in [release/9.0] Update OpenAPI to latest dotnet/aspnetcore#68492

Full Changelog: dotnet/aspnetcore@v9.0.19...v9.0.20

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 9.0.19 to 9.0.20.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

9.0.20

Release

What's Changed

• [release/9.0] Update branding to 9.0.20 by @​dotnet-bot in [release/9.0] Update branding to 9.0.20 dotnet/aspnetcore#68236
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67897
• [release/9.0] Backport FormsInputDateTest fixes by @​ilonatommy in [release/9.0] Backport FormsInputDateTest fixes dotnet/aspnetcore#68126
• [release/9.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 dotnet/aspnetcore#68172
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68188
• [release/9.0] Quarantine System_UsesProvidedCertificateNotFromStore by @​wtgodbe in [release/9.0] Quarantine System_UsesProvidedCertificateNotFromStore dotnet/aspnetcore#68243
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68245
• [release/9.0] Update RepoTasksSystemSecurityCryptographyXmlVersion to 8.0.4 by @​wtgodbe in [release/9.0] Update RepoTasksSystemSecurityCryptographyXmlVersion to 8.0.4 dotnet/aspnetcore#68231
• [9.0] Fix Debian package descriptions by @​wtgodbe in [9.0] Fix Debian package descriptions dotnet/aspnetcore#68256
• Remove Publish-Build-Assets variable group from release/9.0 by @​missymessa in Remove Publish-Build-Assets variable group from release/9.0 dotnet/aspnetcore#68266
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#68308
• [release/9.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @​Youssef1313 with @​Copilot in [release/9.0] Drop Microsoft.AspNetCore.Grpc.Swagger dotnet/aspnetcore#67954
• Merging internal commits for release/9.0 by @​dotnet-bot in Merging internal commits for release/9.0 dotnet/aspnetcore#68362
• [release/9.0] Update OpenAPI to latest by @​Youssef1313 in [release/9.0] Update OpenAPI to latest dotnet/aspnetcore#68492

Full Changelog: dotnet/aspnetcore@v9.0.19...v9.0.20

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 9.0.19 to 9.0.20.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

9.0.20

Release

What's Changed

• [release/9.0] Update branding to 9.0.20 by @​dotnet-bot in [release/9.0] Update branding to 9.0.20 dotnet/aspnetcore#68236
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67897
• [release/9.0] Backport FormsInputDateTest fixes by @​ilonatommy in [release/9.0] Backport FormsInputDateTest fixes dotnet/aspnetcore#68126
• [release/9.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 dotnet/aspnetcore#68172
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68188
• [release/9.0] Quarantine System_UsesProvidedCertificateNotFromStore by @​wtgodbe in [release/9.0] Quarantine System_UsesProvidedCertificateNotFromStore dotnet/aspnetcore#68243
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68245
• [release/9.0] Update RepoTasksSystemSecurityCryptographyXmlVersion to 8.0.4 by @​wtgodbe in [release/9.0] Update RepoTasksSystemSecurityCryptographyXmlVersion to 8.0.4 dotnet/aspnetcore#68231
• [9.0] Fix Debian package descriptions by @​wtgodbe in [9.0] Fix Debian package descriptions dotnet/aspnetcore#68256
• Remove Publish-Build-Assets variable group from release/9.0 by @​missymessa in Remove Publish-Build-Assets variable group from release/9.0 dotnet/aspnetcore#68266
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#68308
• [release/9.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @​Youssef1313 with @​Copilot in [release/9.0] Drop Microsoft.AspNetCore.Grpc.Swagger dotnet/aspnetcore#67954
• Merging internal commits for release/9.0 by @​dotnet-bot in Merging internal commits for release/9.0 dotnet/aspnetcore#68362
• [release/9.0] Update OpenAPI to latest by @​Youssef1313 in [release/9.0] Update OpenAPI to latest dotnet/aspnetcore#68492

Full Changelog: dotnet/aspnetcore@v9.0.19...v9.0.20

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 9.0.19 to 9.0.20.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

9.0.20

Release

What's Changed

• [release/8.0] Update Windows CI images to 2022 by @​AndriySvyryd in [release/8.0] Update Windows CI images to 2022 dotnet/efcore#38526
• [release/8.0] Update branding to 8.0.30 by @​dotnet-bot in [release/8.0] Update branding to 8.0.30 dotnet/efcore#38563
• [release/8.0]: Bump Microsoft.Data.SqlClient from 5.1.7 to 5.1.9 by @​dependabot[bot] in [release/8.0]: Bump Microsoft.Data.SqlClient from 5.1.7 to 5.1.9 dotnet/efcore#38525
• [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.21 to 8.0.28 by @​dependabot[bot] in [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.21 to 8.0.28 dotnet/efcore#38519
• [release/8.0]: Bump Grpc.AspNetCore from 2.71.0 to 2.80.0 by @​dependabot[bot] in [release/8.0]: Bump Grpc.AspNetCore from 2.71.0 to 2.80.0 dotnet/efcore#38517
• [release/8.0]: Bump Azure.Identity from 1.17.0 to 1.21.0 by @​dependabot[bot] in [release/8.0]: Bump Azure.Identity from 1.17.0 to 1.21.0 dotnet/efcore#38510
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/efcore#38624
• [release/8.0] Update SQLitePCLRaw package versions by @​AndriySvyryd with @​Copilot in [release/8.0] Update SQLitePCLRaw package versions dotnet/efcore#38605
• [automated] Merge branch 'release/8.0' => 'release/9.0' by @​github-actions[bot] in [automated] Merge branch 'release/8.0' => 'release/9.0' dotnet/efcore#38531
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/efcore#38698
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/efcore#38732
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/efcore#38736
• [release/8.0] Update branding to 8.0.31 by @​dotnet-bot in [release/8.0] Update branding to 8.0.31 dotnet/efcore#38752
• [release/9.0] Update branding to 9.0.20 by @​dotnet-bot in [release/9.0] Update branding to 9.0.20 dotnet/efcore#38753
• [release/8.0]: Bump Grpc.AspNetCore from 2.80.0 to 2.83.0 by @​dependabot[bot] in [release/8.0]: Bump Grpc.AspNetCore from 2.80.0 to 2.83.0 dotnet/efcore#38748
• [release/8.0]: Bump Azure.ResourceManager.CosmosDB from 1.3.2 to 1.5.0 by @​dependabot[bot] in [release/8.0]: Bump Azure.ResourceManager.CosmosDB from 1.3.2 to 1.5.0 dotnet/efcore#38747
• [release/9.0]: Bump Microsoft.Azure.Cosmos from 3.61.0 to 3.62.0 by @​dependabot[bot] in [release/9.0]: Bump Microsoft.Azure.Cosmos from 3.61.0 to 3.62.0 dotnet/efcore#38714
• [release/9.0]: Bump OpenTelemetry.Exporter.InMemory from 1.8.1 to 1.16.0 by @​dependabot[bot] in [release/9.0]: Bump OpenTelemetry.Exporter.InMemory from 1.8.1 to 1.16.0 dotnet/efcore#38656
• [release/9.0]: Bump Newtonsoft.Json from 13.0.3 to 13.0.4 by @​dependabot[bot] in [release/9.0]: Bump Newtonsoft.Json from 13.0.3 to 13.0.4 dotnet/efcore#38654
• [release/9.0]: Bump Microsoft.Data.SqlClient from 5.1.6 to 5.1.9 by @​dependabot[bot] in [release/9.0]: Bump Microsoft.Data.SqlClient from 5.1.6 to 5.1.9 dotnet/efcore#38649
• [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.28 to 8.0.29 by @​dependabot[bot] in [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.28 to 8.0.29 dotnet/efcore#38646
• [release/9.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.2 to 8.0.29 by @​dependabot[bot] in [release/9.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.2 to 8.0.29 dotnet/efcore#38634
• [automated] Merge branch 'release/8.0' => 'release/9.0' by @​github-actions[bot] in [automated] Merge branch 'release/8.0' => 'release/9.0' dotnet/efcore#38733
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/efcore#38773
• Merging internal commits for release/9.0 by @​dotnet-bot in Merging internal commits for release/9.0 dotnet/efcore#38783

Full Changelog: dotnet/efcore@v9.0.19...v9.0.20

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 9.0.19 to 9.0.20.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

9.0.20

Release

What's Changed

• [release/8.0] Update Windows CI images to 2022 by @​AndriySvyryd in [release/8.0] Update Windows CI images to 2022 dotnet/efcore#38526
• [release/8.0] Update branding to 8.0.30 by @​dotnet-bot in [release/8.0] Update branding to 8.0.30 dotnet/efcore#38563
• [release/8.0]: Bump Microsoft.Data.SqlClient from 5.1.7 to 5.1.9 by @​dependabot[bot] in [release/8.0]: Bump Microsoft.Data.SqlClient from 5.1.7 to 5.1.9 dotnet/efcore#38525
• [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.21 to 8.0.28 by @​dependabot[bot] in [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.21 to 8.0.28 dotnet/efcore#38519
• [release/8.0]: Bump Grpc.AspNetCore from 2.71.0 to 2.80.0 by @​dependabot[bot] in [release/8.0]: Bump Grpc.AspNetCore from 2.71.0 to 2.80.0 dotnet/efcore#38517
• [release/8.0]: Bump Azure.Identity from 1.17.0 to 1.21.0 by @​dependabot[bot] in [release/8.0]: Bump Azure.Identity from 1.17.0 to 1.21.0 dotnet/efcore#38510
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/efcore#38624
• [release/8.0] Update SQLitePCLRaw package versions by @​AndriySvyryd with @​Copilot in [release/8.0] Update SQLitePCLRaw package versions dotnet/efcore#38605
• [automated] Merge branch 'release/8.0' => 'release/9.0' by @​github-actions[bot] in [automated] Merge branch 'release/8.0' => 'release/9.0' dotnet/efcore#38531
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/efcore#38698
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/efcore#38732
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/efcore#38736
• [release/8.0] Update branding to 8.0.31 by @​dotnet-bot in [release/8.0] Update branding to 8.0.31 dotnet/efcore#38752
• [release/9.0] Update branding to 9.0.20 by @​dotnet-bot in [release/9.0] Update branding to 9.0.20 dotnet/efcore#38753
• [release/8.0]: Bump Grpc.AspNetCore from 2.80.0 to 2.83.0 by @​dependabot[bot] in [release/8.0]: Bump Grpc.AspNetCore from 2.80.0 to 2.83.0 dotnet/efcore#38748
• [release/8.0]: Bump Azure.ResourceManager.CosmosDB from 1.3.2 to 1.5.0 by @​dependabot[bot] in [release/8.0]: Bump Azure.ResourceManager.CosmosDB from 1.3.2 to 1.5.0 dotnet/efcore#38747
• [release/9.0]: Bump Microsoft.Azure.Cosmos from 3.61.0 to 3.62.0 by @​dependabot[bot] in [release/9.0]: Bump Microsoft.Azure.Cosmos from 3.61.0 to 3.62.0 dotnet/efcore#38714
• [release/9.0]: Bump OpenTelemetry.Exporter.InMemory from 1.8.1 to 1.16.0 by @​dependabot[bot] in [release/9.0]: Bump OpenTelemetry.Exporter.InMemory from 1.8.1 to 1.16.0 dotnet/efcore#38656
• [release/9.0]: Bump Newtonsoft.Json from 13.0.3 to 13.0.4 by @​dependabot[bot] in [release/9.0]: Bump Newtonsoft.Json from 13.0.3 to 13.0.4 dotnet/efcore#38654
• [release/9.0]: Bump Microsoft.Data.SqlClient from 5.1.6 to 5.1.9 by @​dependabot[bot] in [release/9.0]: Bump Microsoft.Data.SqlClient from 5.1.6 to 5.1.9 dotnet/efcore#38649
• [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.28 to 8.0.29 by @​dependabot[bot] in [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.28 to 8.0.29 dotnet/efcore#38646
• [release/9.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.2 to 8.0.29 by @​dependabot[bot] in [release/9.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.2 to 8.0.29 dotnet/efcore#38634
• [automated] Merge branch 'release/8.0' => 'release/9.0' by @​github-actions[bot] in [automated] Merge branch 'release/8.0' => 'release/9.0' dotnet/efcore#38733
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/efcore#38773
• Merging internal commits for release/9.0 by @​dotnet-bot in Merging internal commits for release/9.0 dotnet/efcore#38783

Full Changelog: dotnet/efcore@v9.0.19...v9.0.20

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
car-community-2u92	Error		Sep 12, 2026 7:10pm UTC
car-community-ks78	Ready	Preview	Sep 12, 2026 7:10pm UTC

[codeant-ai]

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: dc29ce41-0033-445d-9063-1b3d4bc6870a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA b9eb05c.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Microsoft.AspNetCore.Authentication.JwtBearer	9.0.20	🟢 6.8	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.AspNetCore.Identity.EntityFrameworkCore	9.0.20	🟢 6.8	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.AspNetCore.OpenApi	9.0.20	🟢 6.8	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.EntityFrameworkCore	9.0.20	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.EntityFrameworkCore.SqlServer	9.0.20	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.EntityFrameworkCore.Tools	10.0.12	Unknown	Unknown

Scanned Files

• CarCommunity/CarCommunity.csproj