Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bump docker tag to v2.4.0 for release #1414

Merged
merged 1 commit into from
Jul 26, 2024

Conversation

spencerschrock
Copy link
Member

The main change is the Scorecard bump to v5.0.0, which includes maintainer annotations which will affect the SARIF produced by this action.

For full details see the release notes:
https://github.com/ossf/scorecard/releases/tag/v5.0.0

The main change is the Scorecard bump to v5.0.0, which includes
maintainer annotations which will affect the SARIF produced by this
action.

For full details see the release notes:
https://github.com/ossf/scorecard/releases/tag/v5.0.0

Signed-off-by: Spencer Schrock <sschrock@google.com>
@spencerschrock spencerschrock marked this pull request as ready for review July 25, 2024 18:39
Copy link
Member

@justaugustus justaugustus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Merge when ready!

@spencerschrock
Copy link
Member Author

Since #1410, the nightly e2e test has ran 7 times, and just passed a workflow_dispatch run as well.

Testing of the action + maintainer annotations (with regard to Code Scanning dashboard) worked as planned.

  1. created a repo, got 10 alerts from checks.
  2. created an annotation to ignore Code-Review and the code-review alert closed.
  3. switched the annotation to ignore Maintained. The Code-Review alert re-opened and the maintained alert closed.

@spencerschrock spencerschrock merged commit 62b2cac into ossf:main Jul 26, 2024
9 checks passed
@spencerschrock spencerschrock deleted the bump-docker branch July 26, 2024 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants