Commits

Branch selector

 main

User selector

All users

Datepicker

All time

Commit History

Commits on Aug 29, 2022

• :seedling: Fix for empty repository (#2207)

  Show description for 5ac9f39
  naveensrinivasan

  authored
  5ac9f39

  Copy full SHA for 5ac9f39

• :seedling: Bump github.com/onsi/gomega from 1.20.0 to 1.20.1

  Show description for 33ab335
  dependabot[bot]

  committed
  33ab335

  Copy full SHA for 33ab335

• ✨ Add CODEOWNERS branch protection check (#2057)

  Show description for 621449f
  raghavkaul

  authored
  621449f

  Copy full SHA for 621449f

Commits on Aug 26, 2022

• Allow contents: write for Token-Permissions when doing mvn release (#2202)

  Show description for 6fc08e7
  katzj

  authored
  6fc08e7

  Copy full SHA for 6fc08e7

• ✨ Optimize SAST check (#2191)

  Show description for a8e9050
  

  spencerschrock

  and

  azeemshaikh38

  authored
  a8e9050

  Copy full SHA for a8e9050

• Deduplicate projects by excluding URL fragments (#2201)

  spencerschrock

  authored
  11ff78e

  Copy full SHA for 11ff78e

• :seedling: Bump cloud.google.com/go/bigquery from 1.38.0 to 1.39.0

  Show description for b40efd2
  dependabot[bot]

  committed
  b40efd2

  Copy full SHA for b40efd2

• Make the Scalable Scorecards document public. (#2199)

  calebbrown

  authored
  9460030

  Copy full SHA for 9460030

• :seedling: Bump github/codeql-action from 2.1.20 to 2.1.21 (#2200)

  Show description for fb630a8
  dependabot[bot]

  authored
  fb630a8

  Copy full SHA for fb630a8

Commits on Aug 25, 2022

• :seedling: Bump cloud.google.com/go/pubsub from 1.24.0 to 1.25.1 (#2197)

  Show description for 64daafb
  dependabot[bot]

  authored
  64daafb

  Copy full SHA for 64daafb

Commits on Aug 24, 2022

• :seedling: Bump actions/setup-go from 3.2.1 to 3.3.0 (#2194)

  Show description for 32d6ba2
  dependabot[bot]

  authored
  32d6ba2

  Copy full SHA for 32d6ba2

Commits on Aug 23, 2022

• :seedling: Bump github/codeql-action from 2.1.19 to 2.1.20 (#2187)

  Show description for 8b3793a
  dependabot[bot]

  authored
  8b3793a

  Copy full SHA for 8b3793a

• :seedling: Bump github.com/caarlos0/env/v6 from 6.9.3 to 6.10.0 (#2188)

  dependabot[bot]

  authored
  86aa297

  Copy full SHA for 86aa297

Commits on Aug 22, 2022

• :seedling: Bump actions/cache from 3.0.7 to 3.0.8 (#2184)

  Show description for e2813b8
  dependabot[bot]

  authored
  e2813b8

  Copy full SHA for e2813b8

• :seedling: Bump distroless/base from `49d2923` to `533c15e` (#2185)

  Show description for a4d2c01
  dependabot[bot]

  authored
  a4d2c01

  Copy full SHA for a4d2c01

Commits on Aug 20, 2022

• :seedling: Bump github/codeql-action from 1.0.0 to 2.1.19 (#2178)

  Show description for af2ee3d
  dependabot[bot]

  authored
  af2ee3d

  Copy full SHA for af2ee3d

Commits on Aug 19, 2022

• Check for security polices in RST format at toplevel and .github as well. (#2180)

  wenottingham

  authored
  77fa781

  Copy full SHA for 77fa781

• ✨ Improved license check (#2179)

  Show description for 2920b32
  spencerschrock

  authored
  2920b32

  Copy full SHA for 2920b32

• :seedling: Bump actions/dependency-review-action from 2.0.4 to 2.1.0 (#2176)

  Show description for 25fd14d
  dependabot[bot]

  authored
  25fd14d

  Copy full SHA for 25fd14d

• Don't error on workflow parse failure in Binary-Artifacts (#2170)

  e3n0

  authored
  4a15760

  Copy full SHA for 4a15760

Commits on Aug 18, 2022

• Update .goreleaser.yml (#2172)

  laurentsimon

  authored
  2cbf5af

  Copy full SHA for 2cbf5af

• Update scorecard-action to v2:alpha (#2171)

  azeemshaikh38

  authored
  f7c0db7

  Copy full SHA for f7c0db7

Commits on Aug 17, 2022

• 🐛 Fix remediation text when Scorecard is run multiple times within a program (#2168)

  Show description for 6dcfde9
  spencerschrock

  authored
  6dcfde9

  Copy full SHA for 6dcfde9

• :seedling: Bump sigstore/cosign-installer from 2.5.0 to 2.5.1 (#2167)

  Show description for c86a1aa
  dependabot[bot]

  authored
  c86a1aa

  Copy full SHA for c86a1aa

• :seedling: Upgrade to go 1.18 (#2143)

  Show description for 10b6052
  naveensrinivasan

  authored
  10b6052

  Copy full SHA for 10b6052

• Use generic generator for SLSA (#2146)

  Show description for 887facf
  laurentsimon

  authored
  887facf

  Copy full SHA for 887facf

Commits on Aug 16, 2022

• Unflag the `--commit` option (#2156)

  azeemshaikh38

  authored
  6001571

  Copy full SHA for 6001571

• 🐛 Detect recently created Github repositories (#2151)

  Show description for ff9c062
  raghavkaul

  authored
  ff9c062

  Copy full SHA for ff9c062

• Remove duplicate projects with different casings (#2155)

  azeemshaikh38

  authored
  d2b3496

  Copy full SHA for d2b3496

• 🐛 Add scorecard-action to the security-events allowlist in Token Permissions check (#2153)

  Show description for 2f253e8
  spencerschrock

  authored
  2f253e8

  Copy full SHA for 2f253e8

• :seedling: Bump cloud.google.com/go/bigquery from 1.37.0 to 1.38.0 (#2149)

  Show description for 2fd81c0
  dependabot[bot]

  authored
  2fd81c0

  Copy full SHA for 2fd81c0

Commits on Aug 15, 2022

• ✨ Scorecard returns a non-zero exit code if any check has a runtime error (#2133)

  Show description for 8de962e
  spencerschrock

  authored
  8de962e

  Copy full SHA for 8de962e

• :seedling: Bump step-security/harden-runner from 1.4.4 to 1.4.5 (#2148)

  Show description for 6f4115d
  dependabot[bot]

  authored
  6f4115d

  Copy full SHA for 6f4115d

Commits on Aug 12, 2022

• ✨ Favor SLSA provenance over plain signature in Signed-Release (#2144)

  Show description for 7772984
  laurentsimon

  authored
  7772984

  Copy full SHA for 7772984

• :seedling: Bump actions/cache from 3.0.6 to 3.0.7

  Show description for 1e1bfab
  dependabot[bot]

  committed
  1e1bfab

  Copy full SHA for 1e1bfab

Pagination

Previous

Next