-
Notifications
You must be signed in to change notification settings - Fork 84
Comparing changes
Open a pull request
base repository: ossf/scorecard-action
base: 865b409
head repository: ossf/scorecard-action
compare: e363bfc
- 11 commits
- 10 files changed
- 3 contributors
Commits on Sep 12, 2022
-
🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 (#934)
Bumps [github.com/caarlos0/env/v6](https://github.com/caarlos0/env) from 6.10.0 to 6.10.1. - [Release notes](https://github.com/caarlos0/env/releases) - [Changelog](https://github.com/caarlos0/env/blob/main/.goreleaser.yml) - [Commits](caarlos0/env@v6.10.0...v6.10.1) --- updated-dependencies: - dependency-name: github.com/caarlos0/env/v6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for d733726 - Browse repository at this point
Copy the full SHA d733726View commit details
Commits on Sep 13, 2022
-
feat: do not run signing on pull requests (#935)
* update Signed-off-by: laurentsimon <[email protected]> * update Signed-off-by: laurentsimon <[email protected]> Signed-off-by: laurentsimon <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 6213479 - Browse repository at this point
Copy the full SHA 6213479View commit details
Commits on Sep 14, 2022
-
🌱 Bump debian from 11.4-slim to 11.5-slim (#936)
Bumps debian from 11.4-slim to 11.5-slim. --- updated-dependencies: - dependency-name: debian dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 8ee777f - Browse repository at this point
Copy the full SHA 8ee777fView commit details
Commits on Sep 17, 2022
-
🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 (#938)
Bumps [github.com/sigstore/cosign](https://github.com/sigstore/cosign) from 1.11.1 to 1.12.0. - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v1.11.1...v1.12.0) --- updated-dependencies: - dependency-name: github.com/sigstore/cosign dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for c858631 - Browse repository at this point
Copy the full SHA c858631View commit details
Commits on Sep 20, 2022
-
🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 (#941)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.24. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b398f52...904260d) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 2db2a1c - Browse repository at this point
Copy the full SHA 2db2a1cView commit details
Commits on Sep 26, 2022
-
🐛 Restore behavior of ignoring scorecard runtime errors (#948)
* Wrap scorecard's cobra runE function to ignore check runtime errors. Signed-off-by: Spencer Schrock <[email protected]> * Bump scorecard to pseudo-version for commit 9f67c4ead1163fceae6931e892634c3b12d86e0a Signed-off-by: Spencer Schrock <[email protected]> * Bump scorecard to release with ErrorCheckRuntime Signed-off-by: Spencer Schrock <[email protected]> * Add comment for new behavior Signed-off-by: Spencer Schrock <[email protected]> * Address feedback. Signed-off-by: Spencer Schrock <[email protected]> Signed-off-by: Spencer Schrock <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for a346ade - Browse repository at this point
Copy the full SHA a346adeView commit details
Commits on Sep 27, 2022
-
🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0 (#950)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.1.0 to 2.4.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@23d1fff...375c537) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 9a2bfd4 - Browse repository at this point
Copy the full SHA 9a2bfd4View commit details -
🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1
Bumps [github.com/sigstore/cosign](https://github.com/sigstore/cosign) from 1.12.0 to 1.12.1. - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v1.12.0...v1.12.1) --- updated-dependencies: - dependency-name: github.com/sigstore/cosign dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for be7ddf6 - Browse repository at this point
Copy the full SHA be7ddf6View commit details -
🌱 Bump github/codeql-action from 2.1.24 to 2.1.25
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.24 to 2.1.25. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@904260d...86f3159) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for f60b7d6 - Browse repository at this point
Copy the full SHA f60b7d6View commit details -
🌱 Bump codecov/codecov-action from 3.1.0 to 3.1.1
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.0 to 3.1.1. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md) - [Commits](codecov/codecov-action@81cd2dc...d9f34f8) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 65d491b - Browse repository at this point
Copy the full SHA 65d491bView commit details -
Bump docker to next release. (#952)
Signed-off-by: Spencer Schrock <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for e363bfc - Browse repository at this point
Copy the full SHA e363bfcView commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff 865b409...e363bfc