Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create OSSF scorecard job #3032

Merged
merged 8 commits into from
Jan 18, 2024
Merged

Create OSSF scorecard job #3032

merged 8 commits into from
Jan 18, 2024

Commits on Jan 16, 2024

  1. Create scorecard.yml 

    Adds a scorecard workflow to regularly check the repo.
See docs: https://github.com/marketplace/actions/ossf-scorecard-action#scorecard-badge

Signed-off-by: Moritz Johner <moolen@users.noreply.github.com>
    @moolen
    moolen committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    9fe0da7 View commit details
    Browse the repository at this point in the history

  2. fix: add OSSF Scorecard to readme 

    Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
    @moolen
    moolen committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    84b1f3c View commit details
    Browse the repository at this point in the history

  3. chore: bump e2e deps to fix vuln deps 

    Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
    @moolen
    moolen committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    65bf5d2 View commit details
    Browse the repository at this point in the history

  4. fix: update dependencies in docs 

    Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
    @moolen
    moolen committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    a389d15 View commit details
    Browse the repository at this point in the history

  5. chore: pin actions by sha 

    Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
    @moolen
    moolen committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    1b1356d View commit details
    Browse the repository at this point in the history

  6. chore: pin dependencies 

    Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
    @moolen
    moolen committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    d32c132 View commit details
    Browse the repository at this point in the history

  7. chore: use GPG key to sign chart 

    Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
    @moolen
    moolen committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    0161c38 View commit details
    Browse the repository at this point in the history

Commits on Jan 17, 2024

  1. fix: bump e2e Dockerfile alpine version 

    Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
    @moolen
    moolen committed Jan 17, 2024
    Configuration menu
    Copy the full SHA
    a9c6c2e View commit details
    Browse the repository at this point in the history