Skip to content

Conversation

@spencerschrock
Copy link
Member

What kind of change does this PR introduce?

GHCR update

What is the current behavior?

We currently recommend the Google Container Registry images, instead of GitHub container registry. And the GHCR has a Go major version suffix, so we have

FROM ghcr.io/ossf/scorecard/v5:v5.4.0
FROM ghcr.io/ossf/scorecard/v4:v4.13.1-270-gd187f11e

What is the new behavior (if this is a feature change)?**

We recommend using GHCR and the package at the next release will lack the major version suffix, but still be tagged appropriately:

FROM ghcr.io/ossf/scorecard:v5.4.1
  • Tests for the changes have been added (for bug fixes/features)

Which issue(s) this PR fixes

Special notes for your reviewer

Does this PR introduce a user-facing change?

For user-facing changes, please add a concise, human-readable release note to
the release-note

(In particular, describe what changes users might need to make in their
application as a result of this pull request.)

The container images for Scorecard will be published under `ghcr.io/ossf/scorecard`

For parity, also remove major version suffix from GHCR packages.

Signed-off-by: Spencer Schrock <sschrock@google.com>
@spencerschrock spencerschrock requested a review from a team as a code owner December 16, 2025 21:41
@spencerschrock spencerschrock requested review from AdamKorcz and jeffmendoza and removed request for a team December 16, 2025 21:41
@dosubot dosubot bot added the size:S This PR changes 10-29 lines, ignoring generated files. label Dec 16, 2025
@codecov
Copy link

codecov bot commented Dec 16, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.70%. Comparing base (353ed60) to head (df5494f).
⚠️ Report is 298 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4885      +/-   ##
==========================================
+ Coverage   66.80%   69.70%   +2.89%     
==========================================
  Files         230      251      +21     
  Lines       16602    15649     -953     
==========================================
- Hits        11091    10908     -183     
+ Misses       4808     3867     -941     
- Partials      703      874     +171     
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link

This pull request has been marked stale because it has been open for 10 days with no activity

@github-actions github-actions bot added the Stale label Dec 27, 2025
@jeffmendoza jeffmendoza enabled auto-merge (squash) December 27, 2025 02:17
@jeffmendoza jeffmendoza merged commit 525a930 into ossf:main Dec 27, 2025
37 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:S This PR changes 10-29 lines, ignoring generated files. Stale

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants