Skip to content

Actions: renovatebot/renovate

Actions

Scorecard supply-chain security

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
scorecard.yml
4,473 workflow runs
4,473 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

fix(vulnerabilities): fix CJS interop for ae-cvss-calculator import (… Scorecard supply-chain security #8579: Commit 4fce8ec pushed by github-merge-queue bot
47s main
main
47s
refactor(libyears): clarify log messages are LibYear related (#41489) Scorecard supply-chain security #8578: Commit c9fec45 pushed by github-merge-queue bot
56s main
main
56s
chore(github): instrument the getPrCache method (#41490) Scorecard supply-chain security #8577: Commit 7a75ea8 pushed by github-merge-queue bot
39s main
main
39s
test(vendir): avoid hard-to-test branches (#41449) Scorecard supply-chain security #8576: Commit 2be6a71 pushed by github-merge-queue bot
44s main
main
44s
ci: allow triggering "find issues with missing labels" manually (#41494) Scorecard supply-chain security #8575: Commit d53c860 pushed by github-merge-queue bot
46s main
main
46s
docs: clarify registryAliases with a pull-through cache (#41500) Scorecard supply-chain security #8574: Commit 1a129bf pushed by github-merge-queue bot
44s main
main
44s
ci: only run scheduled jobs on main repo (#41501) Scorecard supply-chain security #8573: Commit e9c536f pushed by github-merge-queue bot
56s main
main
56s
fix(libyear): skip disabled dependencies (#41244) Scorecard supply-chain security #8572: Commit ed825d5 pushed by github-merge-queue bot
42s main
main
42s
chore: run more linter on pre-commit (#41482) Scorecard supply-chain security #8571: Commit 235cc20 pushed by github-merge-queue bot
50s main
main
50s
test(libyears): clarify existing behaviour with enabled: false (#41… Scorecard supply-chain security #8570: Commit 1b7e5b2 pushed by github-merge-queue bot
45s main
main
45s
feat: Log PR labels on PR creation (#41450) Scorecard supply-chain security #8569: Commit bd7214d pushed by github-merge-queue bot
41s main
main
41s
feat(terraform): extract provider registry url from lockfile (#41487) Scorecard supply-chain security #8568: Commit c5f0700 pushed by github-merge-queue bot
50s main
main
50s
fix(terraform): respect provider registry from lockfile (#41484) Scorecard supply-chain security #8567: Commit d0b7ca9 pushed by github-merge-queue bot
47s main
main
47s
fix(github): prevent PR cache sync from exhausting all pages (#41462) Scorecard supply-chain security #8566: Commit 2fb68b9 pushed by github-merge-queue bot
40s main
main
40s
chore(instrumentation): instrument osv getVulnerabilities (#41480) Scorecard supply-chain security #8565: Commit 07c6e73 pushed by github-merge-queue bot
56s main
main
56s
fix(util): don't log "Hidden Unicode" warning when reading a binary f… Scorecard supply-chain security #8564: Commit c985ca2 pushed by github-merge-queue bot
46s main
main
46s
feat(instrumentation): allow disabling cloud detectors (#41401) Scorecard supply-chain security #8563: Commit f7efd7d pushed by github-merge-queue bot
55s main
main
55s
fix(deps): update ghcr.io/renovatebot/base-image docker tag to v13.13… Scorecard supply-chain security #8562: Commit 08bcec4 pushed by github-merge-queue bot
42s main
main
42s
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to … Scorecard supply-chain security #8561: Commit 38b9442 pushed by github-merge-queue bot
38s main
main
38s
feat(deps): update ghcr.io/renovatebot/base-image docker tag to v13.1… Scorecard supply-chain security #8560: Commit b5ad989 pushed by github-merge-queue bot
37s main
main
37s
feat(presets): add Error Prone dependency group (#40992) Scorecard supply-chain security #8559: Commit 445cd89 pushed by github-merge-queue bot
49s main
main
49s
fix(util): don't treat Zero Width Joiner as "hidden Unicode" (#41471) Scorecard supply-chain security #8558: Commit 165d88f pushed by github-merge-queue bot
42s main
main
42s
feat(versioning): add Deno versioning support (#40968) Scorecard supply-chain security #8557: Commit f990e71 pushed by github-merge-queue bot
43s main
main
43s
fix(gomod): support major version on replaces with the same Go modu… Scorecard supply-chain security #8556: Commit d04b07f pushed by github-merge-queue bot
49s main
main
49s
fix(vulnerability): handle alerts with null or missing `firstPatchedV… Scorecard supply-chain security #8555: Commit f52ed03 pushed by github-merge-queue bot
55s main
main
55s