Skip to content

Pull requests: ossf/scorecard

New pull request New
48 Open 3,770 Closed
48 Open 3,770 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix: handle duplicate tarball directories size:S This PR changes 10-29 lines, ignoring generated files.
#5165 opened Aug 8, 2026 by rowkav09 Loading…
1
🐛 contain git-mode file reads within the checkout root size:S This PR changes 10-29 lines, ignoring generated files.
#5164 opened Aug 8, 2026 by Sahana2524 Loading…
2 tasks done
✨ feat: factor private vulnerability reporting into Security-Policy check size:L This PR changes 100-499 lines, ignoring generated files.
#5163 opened Aug 5, 2026 by bilaldeveloper4312 Loading…
1
🌱 Bump the gomod group across 2 directories with 23 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code size:XL This PR changes 500-999 lines, ignoring generated files.
#5160 opened Aug 4, 2026 by dependabot Bot Loading…
1
📖 docs: fix broken markdown links and a typo size:XS This PR changes 0-9 lines, ignoring generated files.
#5158 opened Aug 4, 2026 by LD-RW Loading…
2 tasks done
1
🐛 Detect implicit NuGet restores size:L This PR changes 100-499 lines, ignoring generated files.
#5156 opened Aug 3, 2026 by theinfosecguy Loading…
2 tasks done
1
1
feat: add private vulnerability reporting probe to Security-Policy check (fixes #2465) size:L This PR changes 100-499 lines, ignoring generated files.
#5155 opened Aug 2, 2026 by Bimpebabs Loading…
1
1
📖 Clarify shell script pinned dependencies size:XS This PR changes 0-9 lines, ignoring generated files.
#5154 opened Aug 2, 2026 by rylena Loading…
1
1
🐛 normalize extracted file paths to forward slashes size:S This PR changes 10-29 lines, ignoring generated files.
#5153 opened Aug 1, 2026 by pujitha24 Loading…
1
1
🐛 Detect additional untrusted workflow contexts size:S This PR changes 10-29 lines, ignoring generated files.
#5152 opened Aug 1, 2026 by dhrrishitvdeka Loading…
2 tasks done
🌱 Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files.
#5151 opened Aug 1, 2026 by dependabot Bot Loading…
🐛 Fall back when check suites are truncated size:S This PR changes 10-29 lines, ignoring generated files.
#5150 opened Jul 30, 2026 by ECD5A Loading…
2 tasks done
1
1
Solution (#3915): Dangerous Workflow: some user input are not being detected as unt size:M This PR changes 30-99 lines, ignoring generated files.
#5147 opened Jul 28, 2026 by TFGSUMIT Loading…
feat: detect cargo-dist in Packaging check size:S This PR changes 10-29 lines, ignoring generated files.
#5146 opened Jul 27, 2026 by SebTardif Loading…
1 task done
1
🌱 Bump chainguard/static from 5e9c881 to 399c8cb dependencies Pull requests that update a dependency file docker Pull requests that update Docker code size:XS This PR changes 0-9 lines, ignoring generated files.
#5142 opened Jul 27, 2026 by dependabot Bot Loading…
🐛 Branch-Protection: don't fail the whole check on one bad release branch size:S This PR changes 10-29 lines, ignoring generated files.
#5141 opened Jul 25, 2026 by pujitha24 Loading…
1
2
🐛 clients/localdir: normalize repository paths on Windows size:XS This PR changes 0-9 lines, ignoring generated files. Stale
#5138 opened Jul 22, 2026 by darkknight8670 Loading…
1
2
✨ Factor private vulnerability reporting into the Security-Policy score Stale
#5135 opened Jul 19, 2026 by ArasHuseyin • Draft
1
1
🐛 Fix ko matcher in Packaging check to accept either setup-ko spelling size:XS This PR changes 0-9 lines, ignoring generated files.
#5134 opened Jul 17, 2026 by arcaven Loading…
2 tasks done
1
3
✨ Detect step-security/goreleaser-action in Packaging check size:S This PR changes 10-29 lines, ignoring generated files.
#5132 opened Jul 17, 2026 by arcaven Loading…
2 tasks done
1
3
🐛 Fall back when Azure language metrics are unavailable size:L This PR changes 100-499 lines, ignoring generated files. Stale
#5130 opened Jul 17, 2026 by JamieMagee Member Loading…
2 tasks done
2
✨ Detect more untrusted context patterns in Dangerous-Workflow check size:XS This PR changes 0-9 lines, ignoring generated files.
#5127 opened Jul 16, 2026 by darkknight8670 Loading…
1
3
🐛 report repository creation from oldest commit size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5126 opened Jul 15, 2026 by janderssonse Loading…
2 tasks done
1
🐛 fix: handle sparse GitLab tar archives size:S This PR changes 10-29 lines, ignoring generated files.
#5125 opened Jul 15, 2026 by darkknight8670 Loading…
7
✨ Add remediation tip for unpinned pip installs size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5124 opened Jul 15, 2026 by Cryptoteep Loading…
1
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.