Dependency Review

🌱 Add cryptographic verification of release signatures #7388

Sign in to view logs

Triggered via pull request January 8, 2026 20:23

AdamKorcz

opened #4902

AdamKorcz:verify-signed-releases

Status Success

Total duration 20s

Artifacts –

depsreview.yml

on: pull_request

dependency-review

Annotations

1 warning

OpenSSF Scorecard Warning

gomod/github.com/cyberphone/json-canonicalization has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.