Skip to content

Actions: ossf/scorecard-action

Actions

Dependency Review

Actions

Loading...

Show workflow options

Create status badge

dependency-review.yml
308 workflow runs
308 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

🌱 Bump golang from 1.22.6 to 1.23.0 in the docker-images group Dependency Review #931: Pull request #1438 opened by dependabot bot
August 19, 2024 21:35 20s dependabot/docker/docker-images-3addc4c9ad
dependabot/docker/docker-images-3addc4c9ad
August 19, 2024 21:35 20s
🌱 Bump github/codeql-action from 3.26.0 to 3.26.3 in the github-actions group Dependency Review #930: Pull request #1437 opened by dependabot bot
August 19, 2024 21:08 21s dependabot/github_actions/github-actions-8cbcb71e32
dependabot/github_actions/github-actions-8cbcb71e32
August 19, 2024 21:08 21s
fix result file path issues Dependency Review #929: Pull request #1428 synchronize by spencerschrock
August 12, 2024 07:32 23s spencerschrock:fix-result-file
spencerschrock:fix-result-file
August 12, 2024 07:32 23s
fix result file path issues Dependency Review #928: Pull request #1428 opened by spencerschrock
August 11, 2024 21:54 25s spencerschrock:fix-result-file
spencerschrock:fix-result-file
August 11, 2024 21:54 25s
🌱 Bump golang from 1.22.5 to 1.22.6 in the docker-images group Dependency Review #927: Pull request #1424 synchronize by dependabot bot
August 10, 2024 02:49 21s dependabot/docker/docker-images-270455e832
dependabot/docker/docker-images-270455e832
August 10, 2024 02:49 21s
🌱 Bump the github-actions group with 3 updates Dependency Review #926: Pull request #1425 opened by dependabot bot
August 10, 2024 02:41 19s dependabot/github_actions/github-actions-e3f367180a
dependabot/github_actions/github-actions-e3f367180a
August 10, 2024 02:41 19s
🌱 Bump golang from 1.22.5 to 1.22.6 in the docker-images group Dependency Review #925: Pull request #1424 opened by dependabot bot
August 10, 2024 02:41 17s dependabot/docker/docker-images-270455e832
dependabot/docker/docker-images-270455e832
August 10, 2024 02:41 17s
🌱 Bump github.com/sigstore/cosign/v2 from 2.3.0 to 2.4.0 Dependency Review #924: Pull request #1422 synchronize by dependabot bot
August 10, 2024 01:53 23s dependabot/go_modules/github.com/sigstore/cosign/v2-2.4.0
dependabot/go_modules/github.com/sigstore/cosign/v2-2.4.0
August 10, 2024 01:53 23s
🌱 Bump github.com/sigstore/cosign/v2 from 2.3.0 to 2.4.0 Dependency Review #923: Pull request #1422 synchronize by dependabot bot
August 10, 2024 00:21 26s dependabot/go_modules/github.com/sigstore/cosign/v2-2.4.0
dependabot/go_modules/github.com/sigstore/cosign/v2-2.4.0
August 10, 2024 00:21 26s
🌱 Bump golang.org/x/net from 0.27.0 to 0.28.0 Dependency Review #922: Pull request #1421 synchronize by dependabot bot
August 10, 2024 00:21 18s dependabot/go_modules/golang.org/x/net-0.28.0
dependabot/go_modules/golang.org/x/net-0.28.0
August 10, 2024 00:21 18s
use Scorecard library entrypoint instead of Cobra hooking Dependency Review #921: Pull request #1423 synchronize by justaugustus
August 10, 2024 00:11 26s spencerschrock:entrypoint
spencerschrock:entrypoint
August 10, 2024 00:11 26s
use Scorecard library entrypoint instead of Cobra hooking Dependency Review #920: Pull request #1423 synchronize by spencerschrock
August 9, 2024 18:43 18s spencerschrock:entrypoint
spencerschrock:entrypoint
August 9, 2024 18:43 18s
use Scorecard library entrypoint instead of Cobra hooking Dependency Review #919: Pull request #1423 opened by spencerschrock
August 9, 2024 18:41 18s spencerschrock:entrypoint
spencerschrock:entrypoint
August 9, 2024 18:41 18s
🌱 Bump github.com/sigstore/cosign/v2 from 2.3.0 to 2.4.0 Dependency Review #918: Pull request #1422 opened by dependabot bot
August 7, 2024 21:35 25s dependabot/go_modules/github.com/sigstore/cosign/v2-2.4.0
dependabot/go_modules/github.com/sigstore/cosign/v2-2.4.0
August 7, 2024 21:35 25s
🌱 Bump golang.org/x/net from 0.27.0 to 0.28.0 Dependency Review #917: Pull request #1421 opened by dependabot bot
August 6, 2024 21:25 19s dependabot/go_modules/golang.org/x/net-0.28.0
dependabot/go_modules/golang.org/x/net-0.28.0
August 6, 2024 21:25 19s
🌱 Bump the github-actions group across 1 directory with 3 updates Dependency Review #916: Pull request #1420 opened by dependabot bot
August 2, 2024 15:10 20s dependabot/github_actions/github-actions-5e0608db66
dependabot/github_actions/github-actions-5e0608db66
August 2, 2024 15:10 20s
🌱 Bump golang from 829eff9 to 86a3c48 in the docker-images group Dependency Review #915: Pull request #1417 synchronize by justaugustus
August 2, 2024 14:21 19s dependabot/docker/docker-images-a6b85ecf8b
dependabot/docker/docker-images-a6b85ecf8b
August 2, 2024 14:21 19s
Installation docs update Dependency Review #914: Pull request #1416 synchronize by JeremiahAHoward
July 30, 2024 18:16 20s JeremiahAHoward:installationDocsUpdate
JeremiahAHoward:installationDocsUpdate
July 30, 2024 18:16 20s
🌱 Bump github/codeql-action from 3.25.13 to 3.25.15 in the github-actions group Dependency Review #908: Pull request #1418 opened by dependabot bot
July 29, 2024 21:39 21s dependabot/github_actions/github-actions-4f5c65634c
dependabot/github_actions/github-actions-4f5c65634c
July 29, 2024 21:39 21s
🌱 Bump golang from 829eff9 to 86a3c48 in the docker-images group Dependency Review #907: Pull request #1417 opened by dependabot bot
July 29, 2024 21:37 17s dependabot/docker/docker-images-a6b85ecf8b
dependabot/docker/docker-images-a6b85ecf8b
July 29, 2024 21:37 17s
Installation docs update Dependency Review #906: Pull request #1416 synchronize by JeremiahAHoward
July 25, 2024 19:54 18s JeremiahAHoward:installationDocsUpdate
JeremiahAHoward:installationDocsUpdate
July 25, 2024 19:54 18s
bump docker tag to v2.4.0 for release Dependency Review #904: Pull request #1414 opened by spencerschrock
July 24, 2024 20:10 19s spencerschrock:bump-docker
spencerschrock:bump-docker
July 24, 2024 20:10 19s
🐛 lower license sarif alert threshold to 9 Dependency Review #903: Pull request #1411 synchronize by spencerschrock
July 23, 2024 19:00 20s spencerschrock:relax-license-threshold
spencerschrock:relax-license-threshold
July 23, 2024 19:00 20s
🌱 Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 Dependency Review #902: Pull request #1413 synchronize by spencerschrock
July 22, 2024 21:34 23s dependabot/go_modules/github.com/sigstore/cosign/v2-2.3.0
dependabot/go_modules/github.com/sigstore/cosign/v2-2.3.0
July 22, 2024 21:34 23s
🌱 Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 Dependency Review #901: Pull request #1413 opened by dependabot bot
July 22, 2024 21:20 22s dependabot/go_modules/github.com/sigstore/cosign/v2-2.3.0
dependabot/go_modules/github.com/sigstore/cosign/v2-2.3.0
July 22, 2024 21:20 22s