Skip to content

Actions: devfile/alizer

Actions

Scorecard supply-chain security

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
scorecard.yml
259 workflow runs
259 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 Scorecard supply-chain security #450: Pull request #387 opened by dependabot Bot
1m 3s dependabot/go_modules/github.com/go-git/go-git/v5-5.18.0
dependabot/go_modules/github.com/go-git/go-git/v5-5.18.0
1m 3s
Bump golang.org/x/mod from 0.33.0 to 0.35.0 Scorecard supply-chain security #449: Pull request #386 opened by dependabot Bot
1m 11s dependabot/go_modules/golang.org/x/mod-0.35.0
dependabot/go_modules/golang.org/x/mod-0.35.0
1m 11s
Bump next from 13.0.0 to 15.5.15 in /resources/projects/nextjs-app Scorecard supply-chain security #448: Pull request #385 opened by dependabot Bot
1m 30s dependabot/npm_and_yarn/resources/projects/nextjs-app/next-15.5.15
dependabot/npm_and_yarn/resources/projects/nextjs-app/next-15.5.15
1m 30s
Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.17.2 Scorecard supply-chain security #447: Pull request #384 opened by dependabot Bot
1m 35s dependabot/go_modules/github.com/go-git/go-git/v5-5.17.2
dependabot/go_modules/github.com/go-git/go-git/v5-5.17.2
1m 35s
Bump github.com/moby/buildkit from 0.26.3 to 0.29.0 Scorecard supply-chain security #446: Pull request #383 opened by dependabot Bot
1m 4s dependabot/go_modules/github.com/moby/buildkit-0.29.0
dependabot/go_modules/github.com/moby/buildkit-0.29.0
1m 4s
Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 Scorecard supply-chain security #445: Pull request #382 opened by dependabot Bot
1m 11s dependabot/go_modules/github.com/hashicorp/go-version-1.9.0
dependabot/go_modules/github.com/hashicorp/go-version-1.9.0
1m 11s
Bump picomatch from 2.3.1 to 2.3.2 in /resources/projects/nextjs-app Scorecard supply-chain security #444: Pull request #381 opened by dependabot Bot
1m 21s dependabot/npm_and_yarn/resources/projects/nextjs-app/picomatch-2.3.2
dependabot/npm_and_yarn/resources/projects/nextjs-app/picomatch-2.3.2
1m 21s
Bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 Scorecard supply-chain security #443: Pull request #380 opened by dependabot Bot
1m 8s dependabot/go_modules/github.com/go-git/go-git/v5-5.17.1
dependabot/go_modules/github.com/go-git/go-git/v5-5.17.1
1m 8s
Bump path-to-regexp and express in /resources/projects/nodejs-ex-w-devfile Scorecard supply-chain security #442: Pull request #379 opened by dependabot Bot
1m 7s dependabot/npm_and_yarn/resources/projects/nodejs-ex-w-devfile/multi-c6f6658ed3
dependabot/npm_and_yarn/resources/projects/nodejs-ex-w-devfile/multi-c6f6658ed3
1m 7s
Bump github.com/moby/buildkit from 0.26.3 to 0.28.1 Scorecard supply-chain security #441: Pull request #378 opened by dependabot Bot
1m 48s dependabot/go_modules/github.com/moby/buildkit-0.28.1
dependabot/go_modules/github.com/moby/buildkit-0.28.1
1m 48s
Bump next from 13.0.0 to 15.5.14 in /resources/projects/nextjs-app Scorecard supply-chain security #440: Pull request #377 opened by dependabot Bot
1m 28s dependabot/npm_and_yarn/resources/projects/nextjs-app/next-15.5.14
dependabot/npm_and_yarn/resources/projects/nextjs-app/next-15.5.14
1m 28s
Bump flatted from 3.2.7 to 3.4.2 in /resources/projects/nextjs-app Scorecard supply-chain security #439: Pull request #376 opened by dependabot Bot
1m 24s dependabot/npm_and_yarn/resources/projects/nextjs-app/flatted-3.4.2
dependabot/npm_and_yarn/resources/projects/nextjs-app/flatted-3.4.2
1m 24s
Bump next from 13.0.0 to 16.1.7 in /resources/projects/nextjs-app Scorecard supply-chain security #438: Pull request #375 opened by dependabot Bot
5m 37s dependabot/npm_and_yarn/resources/projects/nextjs-app/next-16.1.7
dependabot/npm_and_yarn/resources/projects/nextjs-app/next-16.1.7
5m 37s
Bump golang.org/x/mod from 0.33.0 to 0.34.0 Scorecard supply-chain security #437: Pull request #374 opened by dependabot Bot
1m 3s dependabot/go_modules/golang.org/x/mod-0.34.0
dependabot/go_modules/golang.org/x/mod-0.34.0
1m 3s
Bump github.com/moby/buildkit from 0.26.3 to 0.28.0 Scorecard supply-chain security #436: Pull request #373 opened by dependabot Bot
1m 9s dependabot/go_modules/github.com/moby/buildkit-0.28.0
dependabot/go_modules/github.com/moby/buildkit-0.28.0
1m 9s
Delete .snyk Scorecard supply-chain security #435: Pull request #372 opened by thepetk
1m 19s remove-snyk-file
remove-snyk-file
1m 19s
[Snyk] Security upgrade nuxt from 2.18.1 to 3.0.0 Scorecard supply-chain security #434: Pull request #371 opened by caniszczyk
1m 5s snyk-fix-2491d25c1196df4a70eaadd402dbd4af
snyk-fix-2491d25c1196df4a70eaadd402dbd4af
1m 5s
Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.0 Scorecard supply-chain security #433: Pull request #370 opened by dependabot Bot
2m 2s dependabot/go_modules/github.com/go-git/go-git/v5-5.17.0
dependabot/go_modules/github.com/go-git/go-git/v5-5.17.0
2m 2s
[Snyk] Security upgrade nuxt from 2.18.1 to 3.0.0 Scorecard supply-chain security #432: Pull request #369 opened by caniszczyk
1m 18s snyk-fix-ebf286e53ff4697bb8ddf6b68c894a77
snyk-fix-ebf286e53ff4697bb8ddf6b68c894a77
1m 18s
Bump minimatch from 3.1.2 to 3.1.5 in /resources/projects/nextjs-app Scorecard supply-chain security #431: Pull request #368 opened by dependabot Bot
1m 5s dependabot/npm_and_yarn/resources/projects/nextjs-app/minimatch-3.1.5
dependabot/npm_and_yarn/resources/projects/nextjs-app/minimatch-3.1.5
1m 5s
[Snyk] Security upgrade @angular/core from 14.3.0 to 19.2.19 Scorecard supply-chain security #430: Pull request #367 opened by l0rd
1m 25s snyk-fix-326da122c7272ff37f4be25830022285
snyk-fix-326da122c7272ff37f4be25830022285
1m 25s
[Snyk] Security upgrade svelte from 3.59.2 to 5.53.5 Scorecard supply-chain security #429: Pull request #366 opened by caniszczyk
1m 13s snyk-fix-c7407f3610b33a672b6ef129bc137197
snyk-fix-c7407f3610b33a672b6ef129bc137197
1m 13s
[Snyk] Security upgrade nuxt from 2.18.1 to 3.0.0 Scorecard supply-chain security #428: Pull request #365 opened by caniszczyk
1m 7s snyk-fix-aaf791e4b0769952b48e0e16af7d1734
snyk-fix-aaf791e4b0769952b48e0e16af7d1734
1m 7s
Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 Scorecard supply-chain security #427: Pull request #364 opened by dependabot Bot
1m 15s dependabot/go_modules/github.com/cloudflare/circl-1.6.3
dependabot/go_modules/github.com/cloudflare/circl-1.6.3
1m 15s
Bump github.com/gofiber/fiber/v2 from 2.34.1 to 2.52.12 in /resources/projects/golang-fiber Scorecard supply-chain security #426: Pull request #363 opened by dependabot Bot
1m 7s dependabot/go_modules/resources/projects/golang-fiber/github.com/gofiber/fiber/v2-2.52.12
dependabot/go_modules/resources/projects/golang-fiber/github.com/gofiber/fiber/v2-2.52.12
1m 7s