3 Pull requests merged by 2 people

• 🌱 Bump github.com/golangci/golangci-lint from 1.64.5 to 1.64.6 in /tools

  #4545 merged Mar 3, 2025

• 🌱 Bump the github-actions group with 3 updates

  #4542 merged Mar 3, 2025

• ✨ Support results output as in-toto statement

  #4491 merged Mar 3, 2025

3 Pull requests opened by 2 people

• :seedling: Bump the gomod group across 2 directories with 3 updates

  #4544 opened Mar 3, 2025

• :seedling: silence gocritic warnings by specifying enabled checks

  #4546 opened Mar 3, 2025

• :seedling: Require minimum version of Go 1.23.0

  #4547 opened Mar 3, 2025

2 Issues closed by 1 person

• Differentiate between runtime vulns and devtime vulns

  #3604 closed Mar 8, 2025

• Output Scorecard results as in-toto attestation

  #3352 closed Mar 3, 2025

3 Issues opened by 3 people

• Ignore Development Dependencies in OSV scan

  #4550 opened Mar 6, 2025

• Add HypothesisWorks/hypothesis as a fuzzer

  #4549 opened Mar 5, 2025

• HuggingFace Support

  #4548 opened Mar 4, 2025

3 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Pinned dependencies check in Dockerfile does not handle build args

  #3684 commented on Mar 6, 2025 • 0 new comments

• 🐛 do not allow unsupported `ListReleases` to fail a run

  #4533 commented on Mar 3, 2025 • 0 new comments

• :seedling: avoid unnecessary `[]byte` to `string` conversions

  #4539 commented on Mar 8, 2025 • 0 new comments