{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":421101922,"defaultBranch":"main","name":"scorecard-action","ownerLogin":"ossf","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2021-10-25T16:29:31.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/67707773?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715032065.0","currentOid":""},"activityList":{"items":[{"before":"afab91174477068255f25729b81248f82d3a487a","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.25.0","pushedAt":"2024-05-06T21:47:45.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"09bb953b6a0e34c84fb453985435a07cc2baa3a3","after":"6c55905542a1ce814c7ec177a96904f5bc74aab5","ref":"refs/heads/main","pushedAt":"2024-05-06T21:47:44.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump golang.org/x/net from 0.24.0 to 0.25.0 (#1373)\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.24.0 to 0.25.0.\r\n- [Commits](https://github.com/golang/net/compare/v0.24.0...v0.25.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang.org/x/net\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump golang.org/x/net from 0.24.0 to 0.25.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2281784107\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1373\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1373/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1373\">#1373</a>)"}},{"before":null,"after":"afab91174477068255f25729b81248f82d3a487a","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.25.0","pushedAt":"2024-05-06T21:13:03.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump golang.org/x/net from 0.24.0 to 0.25.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.24.0 to 0.25.0.\n- [Commits](https://github.com/golang/net/compare/v0.24.0...v0.25.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump golang.org/x/net from 0.24.0 to 0.25.0"}},{"before":"042058e5e646dd06975095c317fc381234371947","after":null,"ref":"refs/heads/dependabot/docker/docker-images-ad2f2b09ae","pushedAt":"2024-05-06T21:07:30.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"1511e1305b9d7e51245388421563264573c77bc7","after":"09bb953b6a0e34c84fb453985435a07cc2baa3a3","ref":"refs/heads/main","pushedAt":"2024-05-06T21:07:29.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump distroless/base in the docker-images group (#1372)\n\nBumps the docker-images group with 1 update: distroless/base.\r\n\r\n\r\nUpdates `distroless/base` from `d8d01e2` to `786007f`\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: distroless/base\r\n  dependency-type: direct:production\r\n  dependency-group: docker-images\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump distroless/base in the docker-images group (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2281766719\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1372\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1372/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1372\">#1372</a>)"}},{"before":null,"after":"042058e5e646dd06975095c317fc381234371947","ref":"refs/heads/dependabot/docker/docker-images-ad2f2b09ae","pushedAt":"2024-05-06T21:03:21.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump distroless/base in the docker-images group\n\nBumps the docker-images group with 1 update: distroless/base.\n\n\nUpdates `distroless/base` from `d8d01e2` to `786007f`\n\n---\nupdated-dependencies:\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: docker-images\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump distroless/base in the docker-images group"}},{"before":"535ca5a337620a3d676eaa92697fbda7d19ddca5","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-6cd472f215","pushedAt":"2024-05-06T20:58:58.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"df66cd8fd834fab4483ac0031b8d8ff819b62422","after":"1511e1305b9d7e51245388421563264573c77bc7","ref":"refs/heads/main","pushedAt":"2024-05-06T20:58:57.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump the github-actions group across 1 directory with 6 updates (#1371)\n\nBumps the github-actions group with 6 updates in the / directory:\r\n\r\n| Package | From | To |\r\n| --- | --- | --- |\r\n| [actions/checkout](https://github.com/actions/checkout) | `4.1.3` | `4.1.5` |\r\n| [github/codeql-action](https://github.com/github/codeql-action) | `3.25.2` | `3.25.3` |\r\n| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.7.0` | `2.7.1` |\r\n| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.2.5` | `4.3.2` |\r\n| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.0` | `5.0.1` |\r\n| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `4.0.0` | `5.3.0` |\r\n\r\n\r\n\r\nUpdates `actions/checkout` from 4.1.3 to 4.1.5\r\n- [Release notes](https://github.com/actions/checkout/releases)\r\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/actions/checkout/compare/1d96c772d19495a3b5c517cd2bc0cb401ea0529f...44c2b7a8a4ea60a981eaca3cf939b5f4305c123b)\r\n\r\nUpdates `github/codeql-action` from 3.25.2 to 3.25.3\r\n- [Release notes](https://github.com/github/codeql-action/releases)\r\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/github/codeql-action/compare/8f596b4ae3cb3c588a5c46780b86dd53fef16c52...d39d31e687223d841ef683f52467bd88e9b21c14)\r\n\r\nUpdates `step-security/harden-runner` from 2.7.0 to 2.7.1\r\n- [Release notes](https://github.com/step-security/harden-runner/releases)\r\n- [Commits](https://github.com/step-security/harden-runner/compare/63c24ba6bd7ba022e95695ff85de572c04a18142...a4aa98b93cab29d9b1101a6143fb8bce00e2eac4)\r\n\r\nUpdates `actions/dependency-review-action` from 4.2.5 to 4.3.2\r\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\r\n- [Commits](https://github.com/actions/dependency-review-action/compare/5bbc3ba658137598168acb2ab73b21c432dd411b...0c155c5e8556a497adf53f2c18edabf945ed8e70)\r\n\r\nUpdates `actions/setup-go` from 5.0.0 to 5.0.1\r\n- [Release notes](https://github.com/actions/setup-go/releases)\r\n- [Commits](https://github.com/actions/setup-go/compare/0c52d547c9bc32b1aa3301fd7a9cb496313a4491...cdcb36043654635271a94b9a6d1392de5bb323a7)\r\n\r\nUpdates `golangci/golangci-lint-action` from 4.0.0 to 5.3.0\r\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\r\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/3cfe3a4abbb849e10058ce4af15d205b6da42804...38e1018663fa5173f3968ea0777460d3de38f256)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: actions/checkout\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: github-actions\r\n- dependency-name: github/codeql-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: github-actions\r\n- dependency-name: step-security/harden-runner\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: github-actions\r\n- dependency-name: actions/dependency-review-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: github-actions\r\n- dependency-name: actions/setup-go\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: github-actions\r\n- dependency-name: golangci/golangci-lint-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-major\r\n  dependency-group: github-actions\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump the github-actions group across 1 directory with 6 updates (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2281749244\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1371\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1371/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1371\">#1371</a>"}},{"before":null,"after":"535ca5a337620a3d676eaa92697fbda7d19ddca5","ref":"refs/heads/dependabot/github_actions/github-actions-6cd472f215","pushedAt":"2024-05-06T20:54:52.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the github-actions group across 1 directory with 6 updates\n\nBumps the github-actions group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `4.1.3` | `4.1.5` |\n| [github/codeql-action](https://github.com/github/codeql-action) | `3.25.2` | `3.25.3` |\n| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.7.0` | `2.7.1` |\n| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.2.5` | `4.3.2` |\n| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.0` | `5.0.1` |\n| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `4.0.0` | `5.3.0` |\n\n\n\nUpdates `actions/checkout` from 4.1.3 to 4.1.5\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/1d96c772d19495a3b5c517cd2bc0cb401ea0529f...44c2b7a8a4ea60a981eaca3cf939b5f4305c123b)\n\nUpdates `github/codeql-action` from 3.25.2 to 3.25.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8f596b4ae3cb3c588a5c46780b86dd53fef16c52...d39d31e687223d841ef683f52467bd88e9b21c14)\n\nUpdates `step-security/harden-runner` from 2.7.0 to 2.7.1\n- [Release notes](https://github.com/step-security/harden-runner/releases)\n- [Commits](https://github.com/step-security/harden-runner/compare/63c24ba6bd7ba022e95695ff85de572c04a18142...a4aa98b93cab29d9b1101a6143fb8bce00e2eac4)\n\nUpdates `actions/dependency-review-action` from 4.2.5 to 4.3.2\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/5bbc3ba658137598168acb2ab73b21c432dd411b...0c155c5e8556a497adf53f2c18edabf945ed8e70)\n\nUpdates `actions/setup-go` from 5.0.0 to 5.0.1\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/0c52d547c9bc32b1aa3301fd7a9cb496313a4491...cdcb36043654635271a94b9a6d1392de5bb323a7)\n\nUpdates `golangci/golangci-lint-action` from 4.0.0 to 5.3.0\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/3cfe3a4abbb849e10058ce4af15d205b6da42804...38e1018663fa5173f3968ea0777460d3de38f256)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: github/codeql-action\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: step-security/harden-runner\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: actions/dependency-review-action\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n- dependency-name: actions/setup-go\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: golangci/golangci-lint-action\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the github-actions group across 1 directory with 6 updates"}},{"before":"072ddb3ae13a966993ac417e89c168a6a1d78141","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-03f756c2a9","pushedAt":"2024-05-06T20:54:41.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"7aa721115cfede22f1b266a56a6fa6af18934255","after":null,"ref":"refs/heads/dependabot/docker/docker-images-d2cbf9c333","pushedAt":"2024-05-06T20:53:04.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"fad9a3cc533bb069b1f01f272f1f630895cd690a","after":"df66cd8fd834fab4483ac0031b8d8ff819b62422","ref":"refs/heads/main","pushedAt":"2024-05-06T20:53:03.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump the docker-images group with 2 updates (#1370)\n\nBumps the docker-images group with 2 updates: golang and distroless/base.\r\n\r\n\r\nUpdates `golang` from `450e382` to `d5302d4`\r\n\r\nUpdates `distroless/base` from `611d30d` to `d8d01e2`\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: docker-images\r\n- dependency-name: distroless/base\r\n  dependency-type: direct:production\r\n  dependency-group: docker-images\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump the docker-images group with 2 updates (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2270042114\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1370\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1370/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1370\">#1370</a>)"}},{"before":null,"after":"7aa721115cfede22f1b266a56a6fa6af18934255","ref":"refs/heads/dependabot/docker/docker-images-d2cbf9c333","pushedAt":"2024-04-29T21:44:10.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the docker-images group with 2 updates\n\nBumps the docker-images group with 2 updates: golang and distroless/base.\n\n\nUpdates `golang` from `450e382` to `d5302d4`\n\nUpdates `distroless/base` from `611d30d` to `d8d01e2`\n\n---\nupdated-dependencies:\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: docker-images\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: docker-images\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the docker-images group with 2 updates"}},{"before":null,"after":"072ddb3ae13a966993ac417e89c168a6a1d78141","ref":"refs/heads/dependabot/github_actions/github-actions-03f756c2a9","pushedAt":"2024-04-29T21:39:44.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the github-actions group with 5 updates\n\nBumps the github-actions group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `4.1.3` | `4.1.4` |\n| [github/codeql-action](https://github.com/github/codeql-action) | `3.25.2` | `3.25.3` |\n| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.7.0` | `2.7.1` |\n| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.2.5` | `4.3.1` |\n| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `4.0.0` | `5.1.0` |\n\n\nUpdates `actions/checkout` from 4.1.3 to 4.1.4\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/1d96c772d19495a3b5c517cd2bc0cb401ea0529f...0ad4b8fadaa221de15dcec353f45205ec38ea70b)\n\nUpdates `github/codeql-action` from 3.25.2 to 3.25.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8f596b4ae3cb3c588a5c46780b86dd53fef16c52...d39d31e687223d841ef683f52467bd88e9b21c14)\n\nUpdates `step-security/harden-runner` from 2.7.0 to 2.7.1\n- [Release notes](https://github.com/step-security/harden-runner/releases)\n- [Commits](https://github.com/step-security/harden-runner/compare/63c24ba6bd7ba022e95695ff85de572c04a18142...a4aa98b93cab29d9b1101a6143fb8bce00e2eac4)\n\nUpdates `actions/dependency-review-action` from 4.2.5 to 4.3.1\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/5bbc3ba658137598168acb2ab73b21c432dd411b...e58c696e52cac8e62d61cc21fda89565d71505d7)\n\nUpdates `golangci/golangci-lint-action` from 4.0.0 to 5.1.0\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/3cfe3a4abbb849e10058ce4af15d205b6da42804...9d1e0624a798bb64f6c3cea93db47765312263dc)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: github/codeql-action\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: step-security/harden-runner\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: actions/dependency-review-action\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n- dependency-name: golangci/golangci-lint-action\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the github-actions group with 5 updates"}},{"before":"13470adf4157ed46ce48679d44a18696bd5e7f77","after":null,"ref":"refs/heads/dependabot/docker/docker-images-596ee2dc9e","pushedAt":"2024-04-23T20:26:31.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"1e01a309c1de65b6221c25768bcfc322bac8ccee","after":"fad9a3cc533bb069b1f01f272f1f630895cd690a","ref":"refs/heads/main","pushedAt":"2024-04-23T20:26:30.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump distroless/base in the docker-images group (#1364)\n\nBumps the docker-images group with 1 update: distroless/base.\r\n\r\n\r\nUpdates `distroless/base` from `9bc3117` to `611d30d`\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: distroless/base\r\n  dependency-type: direct:production\r\n  dependency-group: docker-images\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump distroless/base in the docker-images group (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2257487661\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1364\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1364/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1364\">#1364</a>)"}},{"before":"1be74a3aa07e84daa34b16cc8fddb849e1febab8","after":"13470adf4157ed46ce48679d44a18696bd5e7f77","ref":"refs/heads/dependabot/docker/docker-images-596ee2dc9e","pushedAt":"2024-04-23T20:09:24.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump distroless/base in the docker-images group\n\nBumps the docker-images group with 1 update: distroless/base.\n\n\nUpdates `distroless/base` from `9bc3117` to `611d30d`\n\n---\nupdated-dependencies:\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: docker-images\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump distroless/base in the docker-images group"}},{"before":"81e7f3089b1911117360f09dcf6c5785c916cb95","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-dc83195fab","pushedAt":"2024-04-23T20:08:27.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"31f30fdd864c1842e0f2876d7894bef93507682c","after":"1e01a309c1de65b6221c25768bcfc322bac8ccee","ref":"refs/heads/main","pushedAt":"2024-04-23T20:08:26.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump the github-actions group with 3 updates (#1365)\n\nBumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action) and [actions/upload-artifact](https://github.com/actions/upload-artifact).\r\n\r\n\r\nUpdates `actions/checkout` from 4.1.2 to 4.1.3\r\n- [Release notes](https://github.com/actions/checkout/releases)\r\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...1d96c772d19495a3b5c517cd2bc0cb401ea0529f)\r\n\r\nUpdates `github/codeql-action` from 3.24.10 to 3.25.2\r\n- [Release notes](https://github.com/github/codeql-action/releases)\r\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/github/codeql-action/compare/4355270be187e1b672a7a1c7c7bae5afdc1ab94a...8f596b4ae3cb3c588a5c46780b86dd53fef16c52)\r\n\r\nUpdates `actions/upload-artifact` from 4.3.1 to 4.3.3\r\n- [Release notes](https://github.com/actions/upload-artifact/releases)\r\n- [Commits](https://github.com/actions/upload-artifact/compare/5d5d22a31266ced268874388b861e4b58bb5c2f3...65462800fd760344b1a7b4382951275a0abb4808)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: actions/checkout\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: github-actions\r\n- dependency-name: github/codeql-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: github-actions\r\n- dependency-name: actions/upload-artifact\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: github-actions\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump the github-actions group with 3 updates (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2257492398\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1365\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1365/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1365\">#1365</a>)"}},{"before":"6c9627161635020399468147dd04cf3a6fbd7a61","after":"81e7f3089b1911117360f09dcf6c5785c916cb95","ref":"refs/heads/dependabot/github_actions/github-actions-dc83195fab","pushedAt":"2024-04-23T19:55:00.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the github-actions group with 3 updates\n\nBumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action) and [actions/upload-artifact](https://github.com/actions/upload-artifact).\n\n\nUpdates `actions/checkout` from 4.1.2 to 4.1.3\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...1d96c772d19495a3b5c517cd2bc0cb401ea0529f)\n\nUpdates `github/codeql-action` from 3.24.10 to 3.25.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/4355270be187e1b672a7a1c7c7bae5afdc1ab94a...8f596b4ae3cb3c588a5c46780b86dd53fef16c52)\n\nUpdates `actions/upload-artifact` from 4.3.1 to 4.3.3\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/5d5d22a31266ced268874388b861e4b58bb5c2f3...65462800fd760344b1a7b4382951275a0abb4808)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: github/codeql-action\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n- dependency-name: actions/upload-artifact\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the github-actions group with 3 updates"}},{"before":"665016c9c2c7c34fe934fb13ebf88bff794f9b1d","after":"31f30fdd864c1842e0f2876d7894bef93507682c","ref":"refs/heads/main","pushedAt":"2024-04-23T19:45:43.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) (#1366)\n\n* bump scorecard to v5.0.0-rc1\r\n\r\nSigned-off-by: Spencer Schrock <sschrock@google.com>\r\n\r\n* update version info in Makefile\r\n\r\nSigned-off-by: Spencer Schrock <sschrock@google.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Spencer Schrock <sschrock@google.com>","shortMessageHtmlLink":"🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scor…"}},{"before":null,"after":"6c9627161635020399468147dd04cf3a6fbd7a61","ref":"refs/heads/dependabot/github_actions/github-actions-dc83195fab","pushedAt":"2024-04-22T21:26:45.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the github-actions group with 3 updates\n\nBumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action) and [actions/upload-artifact](https://github.com/actions/upload-artifact).\n\n\nUpdates `actions/checkout` from 4.1.2 to 4.1.3\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...1d96c772d19495a3b5c517cd2bc0cb401ea0529f)\n\nUpdates `github/codeql-action` from 3.24.10 to 3.25.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/4355270be187e1b672a7a1c7c7bae5afdc1ab94a...8f596b4ae3cb3c588a5c46780b86dd53fef16c52)\n\nUpdates `actions/upload-artifact` from 4.3.1 to 4.3.3\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/5d5d22a31266ced268874388b861e4b58bb5c2f3...65462800fd760344b1a7b4382951275a0abb4808)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n- dependency-name: github/codeql-action\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n- dependency-name: actions/upload-artifact\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the github-actions group with 3 updates"}},{"before":"69af834f90e3d8be6579cb96b916b1a97f0cbc44","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-bd878f776b","pushedAt":"2024-04-22T21:26:36.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"1be74a3aa07e84daa34b16cc8fddb849e1febab8","ref":"refs/heads/dependabot/docker/docker-images-596ee2dc9e","pushedAt":"2024-04-22T21:23:02.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump distroless/base in the docker-images group\n\nBumps the docker-images group with 1 update: distroless/base.\n\n\nUpdates `distroless/base` from `9bc3117` to `611d30d`\n\n---\nupdated-dependencies:\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: docker-images\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump distroless/base in the docker-images group"}},{"before":null,"after":"69af834f90e3d8be6579cb96b916b1a97f0cbc44","ref":"refs/heads/dependabot/github_actions/github-actions-bd878f776b","pushedAt":"2024-04-15T21:51:03.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github/codeql-action in the github-actions group\n\nBumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action` from 3.24.10 to 3.25.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/4355270be187e1b672a7a1c7c7bae5afdc1ab94a...df5a14dc28094dc936e103b37d749c6628682b60)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github/codeql-action in the github-actions group"}},{"before":"3e68991f89fb5f3416df3a8caaa6d2e1d7387bf0","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.24.0","pushedAt":"2024-04-12T19:40:16.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"3ad4e4fb497304e96dbd74ba2c92f3177b74ef18","after":"665016c9c2c7c34fe934fb13ebf88bff794f9b1d","ref":"refs/heads/main","pushedAt":"2024-04-12T19:40:15.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump golang.org/x/net from 0.23.0 to 0.24.0 (#1358)\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.23.0 to 0.24.0.\r\n- [Commits](https://github.com/golang/net/compare/v0.23.0...v0.24.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang.org/x/net\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump golang.org/x/net from 0.23.0 to 0.24.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2226514117\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1358\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1358/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1358\">#1358</a>)"}},{"before":"f8e9e47e74a1dcea10eba3527eb883b59d02d2aa","after":"3e68991f89fb5f3416df3a8caaa6d2e1d7387bf0","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.24.0","pushedAt":"2024-04-12T19:34:49.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump golang.org/x/net from 0.23.0 to 0.24.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.23.0 to 0.24.0.\n- [Commits](https://github.com/golang/net/compare/v0.23.0...v0.24.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump golang.org/x/net from 0.23.0 to 0.24.0"}},{"before":"b18adc7075002111e4879aa6c1fb80065910f5e3","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-b0deed59a6","pushedAt":"2024-04-12T19:33:33.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"be430e2e8e0b6605427d159b9c14db2b123f71c4","after":"3ad4e4fb497304e96dbd74ba2c92f3177b74ef18","ref":"refs/heads/main","pushedAt":"2024-04-12T19:33:32.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump github/codeql-action in the github-actions group (#1360)\n\nBumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).\r\n\r\n\r\nUpdates `github/codeql-action` from 3.24.9 to 3.24.10\r\n- [Release notes](https://github.com/github/codeql-action/releases)\r\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/github/codeql-action/compare/1b1aada464948af03b950897e5eb522f92603cc2...4355270be187e1b672a7a1c7c7bae5afdc1ab94a)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: github/codeql-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: github-actions\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump github/codeql-action in the github-actions group (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2232116422\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard-action/issues/1360\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard-action/pull/1360/hovercard\" href=\"https://github.com/ossf/scorecard-action/pull/1360\">#1360</a>)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEQvfmzgA","startCursor":null,"endCursor":null}},"title":"Activity · ossf/scorecard-action"}