Skip to content

Actions: ossf/scorecard

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
depsreview.yml
2,448 workflow runs
2,448 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

🌱 Bump cloud.google.com/go/bigquery from 1.61.0 to 1.62.0 Dependency Review #6260: Pull request #4250 synchronize by dependabot bot
July 25, 2024 22:28 21s dependabot/go_modules/cloud.google.com/go/bigquery-1.62.0
dependabot/go_modules/cloud.google.com/go/bigquery-1.62.0
July 25, 2024 22:28 21s
🐛 Update Org RepoClient creation to use transport from parent Client Dependency Review #6259: Pull request #4259 opened by jeffmendoza
July 25, 2024 21:38 20s jeffmendoza:fix-org-repoclient
jeffmendoza:fix-org-repoclient
July 25, 2024 21:38 20s
🌱 Bump cloud.google.com/go/bigquery from 1.61.0 to 1.62.0 Dependency Review #6258: Pull request #4250 opened by dependabot bot
July 23, 2024 09:10 21s dependabot/go_modules/cloud.google.com/go/bigquery-1.62.0
dependabot/go_modules/cloud.google.com/go/bigquery-1.62.0
July 23, 2024 09:10 21s
🌱 Bump chainguard/static from d94c01c to e78eb21 Dependency Review #6257: Pull request #4248 synchronize by dependabot bot
July 22, 2024 22:35 14s dependabot/docker/chainguard/static-e78eb21f59f52446a23f7d45e78805c4f26406a6e9c4b21ec50dfdf07e6bec57
dependabot/docker/chainguard/static-e78eb21f59f52446a23f7d45e78805c4f26406a6e9c4b21ec50dfdf07e6bec57
July 22, 2024 22:35 14s
🌱 Bump actions/setup-go from 5.0.1 to 5.0.2 Dependency Review #6256: Pull request #4239 synchronize by dependabot bot
July 22, 2024 22:24 17s dependabot/github_actions/actions/setup-go-5.0.2
dependabot/github_actions/actions/setup-go-5.0.2
July 22, 2024 22:24 17s
🌱 Bump the github-actions group across 1 directory with 4 updates Dependency Review #6255: Pull request #4249 opened by dependabot bot
July 22, 2024 08:42 20s dependabot/github_actions/github-actions-3c8383cf6b
dependabot/github_actions/github-actions-3c8383cf6b
July 22, 2024 08:42 20s
🌱 Bump chainguard/static from d94c01c to e78eb21 Dependency Review #6254: Pull request #4248 opened by dependabot bot
July 22, 2024 08:39 17s dependabot/docker/chainguard/static-e78eb21f59f52446a23f7d45e78805c4f26406a6e9c4b21ec50dfdf07e6bec57
dependabot/docker/chainguard/static-e78eb21f59f52446a23f7d45e78805c4f26406a6e9c4b21ec50dfdf07e6bec57
July 22, 2024 08:39 17s
🌱 Bump actions/setup-go from 5.0.1 to 5.0.2 Dependency Review #6253: Pull request #4239 synchronize by dependabot bot
July 22, 2024 08:39 15s dependabot/github_actions/actions/setup-go-5.0.2
dependabot/github_actions/actions/setup-go-5.0.2
July 22, 2024 08:39 15s
🌱 add support for parsing azure devops urls Dependency Review #6252: Pull request #4178 synchronize by JamieMagee
July 21, 2024 18:18 24s JamieMagee:azure-devops-repo
JamieMagee:azure-devops-repo
July 21, 2024 18:18 24s
🌱 Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 Dependency Review #6251: Pull request #4244 opened by dependabot bot
July 17, 2024 08:20 23s dependabot/go_modules/github.com/google/go-containerregistry-0.20.1
dependabot/go_modules/github.com/google/go-containerregistry-0.20.1
July 17, 2024 08:20 23s
🌱 Bump github.com/goreleaser/goreleaser/v2 from 2.0.1 to 2.1.0 in /tools Dependency Review #6250: Pull request #4240 synchronize by spencerschrock
July 16, 2024 18:25 25s dependabot/go_modules/tools/github.com/goreleaser/goreleaser/v2-2.1.0
dependabot/go_modules/tools/github.com/goreleaser/goreleaser/v2-2.1.0
July 16, 2024 18:25 25s
🌱 Bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0 Dependency Review #6249: Pull request #4243 opened by dependabot bot
July 16, 2024 08:44 19s dependabot/go_modules/github.com/xanzy/go-gitlab-0.107.0
dependabot/go_modules/github.com/xanzy/go-gitlab-0.107.0
July 16, 2024 08:44 19s
📖 mark codeApproved and sastToolRunsOnAllCommits as experimental Dependency Review #6248: Pull request #4242 opened by spencerschrock
July 15, 2024 21:27 15s spencerschrock:mark-probes-experimental
spencerschrock:mark-probes-experimental
July 15, 2024 21:27 15s
🌱 Bump github.com/goreleaser/goreleaser/v2 from 2.0.1 to 2.1.0 in /tools Dependency Review #6247: Pull request #4240 opened by dependabot bot
July 15, 2024 09:07 22s dependabot/go_modules/tools/github.com/goreleaser/goreleaser/v2-2.1.0
dependabot/go_modules/tools/github.com/goreleaser/goreleaser/v2-2.1.0
July 15, 2024 09:07 22s
🌱 Bump actions/setup-go from 5.0.1 to 5.0.2 Dependency Review #6246: Pull request #4239 opened by dependabot bot
July 15, 2024 08:50 27s dependabot/github_actions/actions/setup-go-5.0.2
dependabot/github_actions/actions/setup-go-5.0.2
July 15, 2024 08:50 27s
🌱 Bump the github-actions group with 2 updates Dependency Review #6245: Pull request #4238 opened by dependabot bot
July 15, 2024 08:50 18s dependabot/github_actions/github-actions-3d66ee34d1
dependabot/github_actions/github-actions-3d66ee34d1
July 15, 2024 08:50 18s
🌱 Bump github.com/moby/buildkit from 0.14.1 to 0.15.0 Dependency Review #6244: Pull request #4236 opened by dependabot bot
July 12, 2024 09:09 19s dependabot/go_modules/github.com/moby/buildkit-0.15.0
dependabot/go_modules/github.com/moby/buildkit-0.15.0
July 12, 2024 09:09 19s
📖 Docs: Remove experimental language around maintainer annotations Dependency Review #6243: Pull request #4235 opened by raghavkaul
July 11, 2024 19:48 21s raghavkaul:docs-maintainer-annotations
raghavkaul:docs-maintainer-annotations
July 11, 2024 19:48 21s
🌱 Update active cisco projects, remove cisco-open projects Dependency Review #6242: Pull request #4226 synchronize by lelia
July 11, 2024 16:31 18s lelia:update-cisco-cronjob-projects
lelia:update-cisco-cronjob-projects
July 11, 2024 16:31 18s
✨ Add important Go packages to projects.csv Dependency Review #6241: Pull request #4176 synchronize by spencerschrock
July 11, 2024 05:12 18s aklevans:main
aklevans:main
July 11, 2024 05:12 18s
✨ Add important Go packages to projects.csv Dependency Review #6240: Pull request #4176 synchronize by spencerschrock
July 11, 2024 04:49 19s aklevans:main
aklevans:main
July 11, 2024 04:49 19s
✨ Add support for Nuget restore Dependency Review #6239: Pull request #4157 synchronize by spencerschrock
July 10, 2024 22:56 20s balteravishay:avbalter/support-dotnet-lock
balteravishay:avbalter/support-dotnet-lock
July 10, 2024 22:56 20s
🌱 Bump github.com/google/osv-scanner from 1.8.1 to 1.8.2 Dependency Review #6238: Pull request #4234 synchronize by spencerschrock
July 10, 2024 21:45 2m 20s dependabot/go_modules/github.com/google/osv-scanner-1.8.2
dependabot/go_modules/github.com/google/osv-scanner-1.8.2
July 10, 2024 21:45 2m 20s
🌱 Bump github.com/google/osv-scanner from 1.8.1 to 1.8.2 Dependency Review #6237: Pull request #4234 opened by dependabot bot
July 10, 2024 21:41 23s dependabot/go_modules/github.com/google/osv-scanner-1.8.2
dependabot/go_modules/github.com/google/osv-scanner-1.8.2
July 10, 2024 21:41 23s
🌱 Bump chainguard/static from a1f8a15 to d94c01c Dependency Review #6236: Pull request #4224 synchronize by dependabot bot
July 10, 2024 21:30 18s dependabot/docker/chainguard/static-d94c01c30dda455626c9642272b489adfc402982b99849149ca678ff4d45b267
dependabot/docker/chainguard/static-d94c01c30dda455626c9642272b489adfc402982b99849149ca678ff4d45b267
July 10, 2024 21:30 18s