Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ossf/scorecard-action
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.0.3
Choose a base ref
...
head repository: ossf/scorecard-action
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.0.4
Choose a head ref
  • 11 commits
  • 10 files changed
  • 3 contributors

Commits on Sep 12, 2022

  1. 🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 (#934)

    Bumps [github.com/caarlos0/env/v6](https://github.com/caarlos0/env) from 6.10.0 to 6.10.1.
    - [Release notes](https://github.com/caarlos0/env/releases)
    - [Changelog](https://github.com/caarlos0/env/blob/main/.goreleaser.yml)
    - [Commits](caarlos0/env@v6.10.0...v6.10.1)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/caarlos0/env/v6
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Sep 12, 2022
    Configuration menu
    Copy the full SHA
    d733726 View commit details
    Browse the repository at this point in the history

Commits on Sep 13, 2022

  1. feat: do not run signing on pull requests (#935)

    * update
    
    Signed-off-by: laurentsimon <[email protected]>
    
    * update
    
    Signed-off-by: laurentsimon <[email protected]>
    
    Signed-off-by: laurentsimon <[email protected]>
    laurentsimon authored Sep 13, 2022
    Configuration menu
    Copy the full SHA
    6213479 View commit details
    Browse the repository at this point in the history

Commits on Sep 14, 2022

  1. 🌱 Bump debian from 11.4-slim to 11.5-slim (#936)

    Bumps debian from 11.4-slim to 11.5-slim.
    
    ---
    updated-dependencies:
    - dependency-name: debian
      dependency-type: direct:production
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Sep 14, 2022
    Configuration menu
    Copy the full SHA
    8ee777f View commit details
    Browse the repository at this point in the history

Commits on Sep 17, 2022

  1. 🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 (#938)

    Bumps [github.com/sigstore/cosign](https://github.com/sigstore/cosign) from 1.11.1 to 1.12.0.
    - [Release notes](https://github.com/sigstore/cosign/releases)
    - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
    - [Commits](sigstore/cosign@v1.11.1...v1.12.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/sigstore/cosign
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Sep 17, 2022
    Configuration menu
    Copy the full SHA
    c858631 View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2022

  1. 🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 (#941)

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.24.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@b398f52...904260d)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Sep 20, 2022
    Configuration menu
    Copy the full SHA
    2db2a1c View commit details
    Browse the repository at this point in the history

Commits on Sep 26, 2022

  1. 🐛 Restore behavior of ignoring scorecard runtime errors (#948)

    * Wrap scorecard's cobra runE function to ignore check runtime errors.
    
    Signed-off-by: Spencer Schrock <[email protected]>
    
    * Bump scorecard to pseudo-version for commit 9f67c4ead1163fceae6931e892634c3b12d86e0a
    
    Signed-off-by: Spencer Schrock <[email protected]>
    
    * Bump scorecard to release with ErrorCheckRuntime
    
    Signed-off-by: Spencer Schrock <[email protected]>
    
    * Add comment for new behavior
    
    Signed-off-by: Spencer Schrock <[email protected]>
    
    * Address feedback.
    
    Signed-off-by: Spencer Schrock <[email protected]>
    
    Signed-off-by: Spencer Schrock <[email protected]>
    spencerschrock authored Sep 26, 2022
    Configuration menu
    Copy the full SHA
    a346ade View commit details
    Browse the repository at this point in the history

Commits on Sep 27, 2022

  1. 🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0 (#950)

    Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.1.0 to 2.4.0.
    - [Release notes](https://github.com/actions/dependency-review-action/releases)
    - [Commits](actions/dependency-review-action@23d1fff...375c537)
    
    ---
    updated-dependencies:
    - dependency-name: actions/dependency-review-action
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Sep 27, 2022
    Configuration menu
    Copy the full SHA
    9a2bfd4 View commit details
    Browse the repository at this point in the history
  2. 🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1

    Bumps [github.com/sigstore/cosign](https://github.com/sigstore/cosign) from 1.12.0 to 1.12.1.
    - [Release notes](https://github.com/sigstore/cosign/releases)
    - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
    - [Commits](sigstore/cosign@v1.12.0...v1.12.1)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/sigstore/cosign
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] committed Sep 27, 2022
    Configuration menu
    Copy the full SHA
    be7ddf6 View commit details
    Browse the repository at this point in the history
  3. 🌱 Bump github/codeql-action from 2.1.24 to 2.1.25

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.24 to 2.1.25.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@904260d...86f3159)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] committed Sep 27, 2022
    Configuration menu
    Copy the full SHA
    f60b7d6 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    65d491b View commit details
    Browse the repository at this point in the history
  5. Bump docker to next release. (#952)

    Signed-off-by: Spencer Schrock <[email protected]>
    spencerschrock authored Sep 27, 2022
    Configuration menu
    Copy the full SHA
    e363bfc View commit details
    Browse the repository at this point in the history
Loading