Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ossf/scorecard-action
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.0.4
Choose a base ref
...
head repository: ossf/scorecard-action
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.0.5
Choose a head ref
  • 11 commits
  • 9 files changed
  • 3 contributors

Commits on Oct 1, 2022

  1. doc: remove trailing space from example (#955)

    Signed-off-by: Jan Macku <[email protected]>
    
    Signed-off-by: Jan Macku <[email protected]>
    jamacku authored Oct 1, 2022
    Configuration menu
    Copy the full SHA
    aa6eae3 View commit details
    Browse the repository at this point in the history

Commits on Oct 4, 2022

  1. 🌱 Bump actions/cache from 3.0.8 to 3.0.10 (#956)

    Bumps [actions/cache](https://github.com/actions/cache) from 3.0.8 to 3.0.10.
    - [Release notes](https://github.com/actions/cache/releases)
    - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
    - [Commits](actions/cache@fd5de65...56461b9)
    
    ---
    updated-dependencies:
    - dependency-name: actions/cache
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 4, 2022
    Configuration menu
    Copy the full SHA
    91fdadc View commit details
    Browse the repository at this point in the history
  2. 🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 (#957)

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.25 to 2.1.26.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@86f3159...e0e5ded)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 4, 2022
    Configuration menu
    Copy the full SHA
    de0b2c5 View commit details
    Browse the repository at this point in the history
  3. 🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 (#958)

    Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 1.4.5 to 1.5.0.
    - [Release notes](https://github.com/step-security/harden-runner/releases)
    - [Commits](step-security/harden-runner@dd2c410...2e205a2)
    
    ---
    updated-dependencies:
    - dependency-name: step-security/harden-runner
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 4, 2022
    Configuration menu
    Copy the full SHA
    f300553 View commit details
    Browse the repository at this point in the history

Commits on Oct 5, 2022

  1. 🌱 Bump debian from 5cf1d98 to b46fc4e (#959)

    Bumps debian from `5cf1d98` to `b46fc4e`.
    
    ---
    updated-dependencies:
    - dependency-name: debian
      dependency-type: direct:production
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 5, 2022
    Configuration menu
    Copy the full SHA
    6075f42 View commit details
    Browse the repository at this point in the history

Commits on Oct 7, 2022

  1. 🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 (#962)

    Bumps [github.com/sigstore/cosign](https://github.com/sigstore/cosign) from 1.12.1 to 1.13.0.
    - [Release notes](https://github.com/sigstore/cosign/releases)
    - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
    - [Commits](sigstore/cosign@v1.12.1...v1.13.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/sigstore/cosign
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 7, 2022
    Configuration menu
    Copy the full SHA
    c3d8fd9 View commit details
    Browse the repository at this point in the history

Commits on Oct 10, 2022

  1. 🌱 Upgrade to go 1.19 (#961)

    - Upgrade to go 1.19
    
    Signed-off-by: naveensrinivasan <[email protected]>
    
    Signed-off-by: naveensrinivasan <[email protected]>
    naveensrinivasan authored Oct 10, 2022
    Configuration menu
    Copy the full SHA
    c986617 View commit details
    Browse the repository at this point in the history

Commits on Oct 12, 2022

  1. 🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#967)

    Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.5.0 to 1.6.0.
    - [Release notes](https://github.com/spf13/cobra/releases)
    - [Commits](spf13/cobra@v1.5.0...v1.6.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/spf13/cobra
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 12, 2022
    Configuration menu
    Copy the full SHA
    851b893 View commit details
    Browse the repository at this point in the history
  2. 🌱 Bump golang from c2a98a5 to b850621 (#966)

    Bumps golang from `c2a98a5` to `b850621`.
    
    ---
    updated-dependencies:
    - dependency-name: golang
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 12, 2022
    Configuration menu
    Copy the full SHA
    5e97403 View commit details
    Browse the repository at this point in the history

Commits on Oct 13, 2022

  1. 🌱 Bump golang from b850621 to 25de7b6 (#968)

    Bumps golang from `b850621` to `25de7b6`.
    
    ---
    updated-dependencies:
    - dependency-name: golang
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 13, 2022
    Configuration menu
    Copy the full SHA
    608d088 View commit details
    Browse the repository at this point in the history

Commits on Oct 18, 2022

  1. New release for Scorecard v4.8.0 (#969)

    - New release to address the issue ossf/scorecard#2338
    
    Signed-off-by: naveensrinivasan <[email protected]>
    
    Signed-off-by: naveensrinivasan <[email protected]>
    naveensrinivasan authored Oct 18, 2022
    Configuration menu
    Copy the full SHA
    ff6221f View commit details
    Browse the repository at this point in the history
Loading