Skip to content

Actions: ossf/scorecard-action

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
dependency-review.yml
207 workflow runs
207 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

🌱 Bump the github-actions group across 1 directory with 8 updates Dependency Review #1186: Pull request #1633 opened by dependabot bot
19s dependabot/github_actions/github-actions-c1e659df1b
dependabot/github_actions/github-actions-c1e659df1b
19s
🌱 Bump github.com/theupdateframework/go-tuf/v2 from 2.2.0 to 2.4.1 Dependency Review #1185: Pull request #1632 opened by dependabot bot
24s dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.4.1
dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.4.1
24s
🌱 Bump github.com/sigstore/sigstore from 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.4 Dependency Review #1184: Pull request #1631 opened by dependabot bot
30s dependabot/go_modules/github.com/sigstore/sigstore-1.10.4
dependabot/go_modules/github.com/sigstore/sigstore-1.10.4
30s
🌱 Bump github.com/sigstore/rekor from 1.4.2 to 1.5.0 Dependency Review #1183: Pull request #1630 opened by dependabot bot
29s dependabot/go_modules/github.com/sigstore/rekor-1.5.0
dependabot/go_modules/github.com/sigstore/rekor-1.5.0
29s
🌱 Bump github.com/theupdateframework/go-tuf/v2 from 2.2.0 to 2.3.1 Dependency Review #1182: Pull request #1629 opened by dependabot bot
1m 11s dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.3.1
dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.3.1
1m 11s
🌱 Bump github.com/sigstore/fulcio from 1.7.1 to 1.8.5 Dependency Review #1181: Pull request #1628 opened by dependabot bot
24s dependabot/go_modules/github.com/sigstore/fulcio-1.8.5
dependabot/go_modules/github.com/sigstore/fulcio-1.8.5
24s
🌱 Bump golang.org/x/net from 0.47.0 to 0.49.0 Dependency Review #1180: Pull request #1627 opened by dependabot bot
19s dependabot/go_modules/golang.org/x/net-0.49.0
dependabot/go_modules/golang.org/x/net-0.49.0
19s
🌱 Bump github.com/sigstore/cosign/v2 from 2.6.1 to 2.6.2 Dependency Review #1179: Pull request #1626 opened by dependabot bot
40s dependabot/go_modules/github.com/sigstore/cosign/v2-2.6.2
dependabot/go_modules/github.com/sigstore/cosign/v2-2.6.2
40s
log POST failures instead of failing entire action Dependency Review #1178: Pull request #1625 opened by spencerschrock
18s spencerschrock:no-post-fail
spencerschrock:no-post-fail
18s
🌱 Bump the github-actions group across 1 directory with 7 updates Dependency Review #1177: Pull request #1622 opened by dependabot bot
18s dependabot/github_actions/github-actions-c83eac6932
dependabot/github_actions/github-actions-c83eac6932
18s
🌱 Bump the github-actions group across 1 directory with 6 updates Dependency Review #1176: Pull request #1621 opened by dependabot bot
16s dependabot/github_actions/github-actions-2fb90fb965
dependabot/github_actions/github-actions-2fb90fb965
16s
🌱 Bump golang.org/x/net from 0.47.0 to 0.48.0 Dependency Review #1175: Pull request #1619 opened by dependabot bot
17s dependabot/go_modules/golang.org/x/net-0.48.0
dependabot/go_modules/golang.org/x/net-0.48.0
17s
🌱 Bump the github-actions group across 1 directory with 5 updates Dependency Review #1174: Pull request #1618 opened by dependabot bot
19s dependabot/github_actions/github-actions-0b2e55b29e
dependabot/github_actions/github-actions-0b2e55b29e
19s
🌱 Bump the docker-images group across 1 directory with 2 updates Dependency Review #1173: Pull request #1617 opened by dependabot bot
17s dependabot/docker/docker-images-aa399a9880
dependabot/docker/docker-images-aa399a9880
17s
🌱 Bump github.com/sigstore/fulcio from 1.7.1 to 1.8.3 Dependency Review #1172: Pull request #1616 opened by dependabot bot
25s dependabot/go_modules/github.com/sigstore/fulcio-1.8.3
dependabot/go_modules/github.com/sigstore/fulcio-1.8.3
25s
🌱 Bump github.com/spf13/cobra from 1.10.1 to 1.10.2 Dependency Review #1171: Pull request #1615 opened by dependabot bot
16s dependabot/go_modules/github.com/spf13/cobra-1.10.2
dependabot/go_modules/github.com/spf13/cobra-1.10.2
16s
🌱 Bump the github-actions group across 1 directory with 4 updates Dependency Review #1170: Pull request #1614 opened by dependabot bot
19s dependabot/github_actions/github-actions-9e0fd6ae1c
dependabot/github_actions/github-actions-9e0fd6ae1c
19s
🌱 Bump the github-actions group across 1 directory with 3 updates Dependency Review #1169: Pull request #1613 opened by dependabot bot
20s dependabot/github_actions/github-actions-aa6deba5c1
dependabot/github_actions/github-actions-aa6deba5c1
20s
🌱 Bump golang.org/x/crypto from 0.44.0 to 0.45.0 Dependency Review #1168: Pull request #1609 opened by dependabot bot
16s dependabot/go_modules/golang.org/x/crypto-0.45.0
dependabot/go_modules/golang.org/x/crypto-0.45.0
16s
🌱 Bump the github-actions group with 2 updates Dependency Review #1167: Pull request #1608 opened by dependabot bot
20s dependabot/github_actions/github-actions-718fbf2243
dependabot/github_actions/github-actions-718fbf2243
20s
🌱 Bump golang from 6ca9eb0 to e68f6a0 in the docker-images group Dependency Review #1166: Pull request #1607 opened by dependabot bot
17s dependabot/docker/docker-images-8cd55667e7
dependabot/docker/docker-images-8cd55667e7
17s
🌱 Bump github.com/ossf/scorecard/v5 from 5.3.0 to 5.4.0 Dependency Review #1165: Pull request #1604 opened by dependabot bot
32s dependabot/go_modules/github.com/ossf/scorecard/v5-5.4.0
dependabot/go_modules/github.com/ossf/scorecard/v5-5.4.0
32s
bump scorecard to v5.4.0 Dependency Review #1164: Pull request #1603 opened by spencerschrock
34s spencerschrock:scorecard-bump
spencerschrock:scorecard-bump
34s
sign with sigstore-go instead of cosign Dependency Review #1163: Pull request #1594 synchronize by spencerschrock
19s spencerschrock:oidc
spencerschrock:oidc
19s
sign with sigstore-go instead of cosign Dependency Review #1162: Pull request #1594 synchronize by spencerschrock
23s spencerschrock:oidc
spencerschrock:oidc
23s