Skip to content

Pull requests: ossf/scorecard

New pull request New
26 Open 3,463 Closed
26 Open 3,463 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

✨ Add zizmor to permissions allowlist
#4758 opened Aug 15, 2025 by martincostello Loading…
2 tasks done
2
🌱 Bump the github-actions group across 1 directory with 5 updates dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code
#4756 opened Aug 11, 2025 by dependabot bot Loading…
🌱 Bump the gomod group across 2 directories with 9 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code
#4755 opened Aug 11, 2025 by dependabot bot Loading…
🌱 Bump the distroless group across 6 directories with 1 update dependencies Pull requests that update a dependency file docker Pull requests that update Docker code
#4754 opened Aug 11, 2025 by dependabot bot Loading…
📖 spelling fixes
#4750 opened Aug 7, 2025 by scop Loading…
1 of 2 tasks
3
✨ add support for Claude Code Security Reviewer SAST Stale
#4749 opened Aug 7, 2025 by scop Loading…
2 tasks done
1
📖 Added a note explaining if you get a runtime error for Branch Protection Stale
#4746 opened Aug 6, 2025 by dcaine125 Loading…
2 tasks done
2
🌱 Implementation of CII_Best_Practices custon URL though environment va…
#4744 opened Aug 4, 2025 by jakbrownbytes Loading…
2 tasks done
5
🌱 chore: Add Hiero's hiero-did-sdk-js repo to the cron
#4743 opened Aug 4, 2025 by jwagantall Loading…
2 tasks done
6
🐛 trip surrounding quotes that may have been added by extractCommand Stale
#4736 opened Aug 1, 2025 by Fix3dP0int Loading…
2 tasks done
1
5
✨ Add npm package registry detection to Packaging check
#4734 opened Jul 31, 2025 by Fix3dP0int Loading…
2 tasks done
1
4
✨ Initial draft of using Minder rules in Scorecard
#4723 opened Jul 25, 2025 by evankanderson • Draft
1 of 2 tasks
6
🌱 add cases for alerts in dangerous workflow pattern detection Stale
#4722 opened Jul 24, 2025 by AdamKorcz Loading…
2 tasks done
4
🐛 detect blocked user name and email in dangerous workflow
#4720 opened Jul 23, 2025 by AdamKorcz Loading…
2 tasks done
2
🐛 detect label names in dangerous workflows Stale
#4718 opened Jul 23, 2025 by AdamKorcz Loading…
2 tasks done
1
4
🐛 detect dangerous patterns in toJSON() in dangerous workflows
#4717 opened Jul 23, 2025 by AdamKorcz Loading…
2 tasks done
5
🌱 Add utils for retrieving data about project dependencies
#4711 opened Jul 21, 2025 by AdamKorcz • Draft
2 tasks done
4
🌱 implement GetPackage for depsdev client
#4697 opened Jul 9, 2025 by AdamKorcz Loading…
2 tasks done
4
🌱 add support for KICS SAST Stale
#4687 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
1
3
🌱 add support for Checkov SAST tool Stale
#4686 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
1
3
🌱 add support for trivy SAST tool Stale
#4685 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
3
🌱 add support for elixir packaging workflow
#4684 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
1
4
🐛 do not include asName when creating digest of FROM name as asName
#4683 opened Jun 27, 2025 by AdamKorcz Loading…
2 tasks done
1
4
✨ feat: Refactor scorecard serve cmd Stale
#4665 opened Jun 17, 2025 by Fix3dP0int Loading…
1 of 2 tasks
24
🌱 migrate to golangci-lint v2
#4641 opened May 29, 2025 by spencerschrock Loading…
1 of 2 tasks
5
ProTip! Updated in the last three days: updated:>2025-08-16.