Skip to content

Actions: ossf/scorecard

Actions

docker-build

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
docker.yml
824 workflow runs
824 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
✨ checks/dangerous_workflow: detect committer.{name,email} as untrusted input docker-build #9105: Pull request #5250 synchronize by Shxnque
Action required Shxnque:feat/dangerous-workflow-committer-untrusted
Shxnque:feat/dangerous-workflow-committer-untrusted
Action required
🌱 Bump revanite-io/osps-baseline-action from 1.5.0 to 1.5.1 in the github-actions group docker-build #9104: Pull request #5284 opened by dependabot Bot
4m 29s dependabot/github_actions/github-actions-2342c6521e
dependabot/github_actions/github-actions-2342c6521e
4m 29s
🌱 Bump github.com/google/osv-scanner/v2 from 2.3.2 to 2.6.0 docker-build #9103: Pull request #5264 synchronize by dependabot Bot
1m 28s dependabot/go_modules/github.com/google/osv-scanner/v2-2.6.0
dependabot/go_modules/github.com/google/osv-scanner/v2-2.6.0
1m 28s
🌱 Bump the golang group across 8 directories with 1 update docker-build #9102: Pull request #5052 synchronize by dependabot Bot
4m 35s dependabot/docker/golang-a20a220437
dependabot/docker/golang-a20a220437
4m 35s
🌱 Bump the distroless group across 6 directories with 1 update docker-build #9101: Pull request #5064 synchronize by dependabot Bot
4m 34s dependabot/docker/clients/githubrepo/roundtripper/tokens/server/distroless-8e28c70efd
dependabot/docker/clients/githubrepo/roundtripper/tokens/server/distroless-8e28c70efd
4m 34s
🌱 Bump chainguard/static from 5e9c881 to fe55470 docker-build #9100: Pull request #5283 opened by dependabot Bot
4m 32s dependabot/docker/chainguard/static-fe55470f22d3259488d9d3739168d8f04da67755f0b69382bc26eda4a7d3d327
dependabot/docker/chainguard/static-fe55470f22d3259488d9d3739168d8f04da67755f0b69382bc26eda4a7d3d327
4m 32s
Add forkee name to regex patterns docker-build #9099: Pull request #5282 opened by Rashmibhandari-alt
Action required Rashmibhandari-alt:main
Rashmibhandari-alt:main
Action required
✨ Branch-Protection: treat GitHub merge queue rule as requiring up-to-date branches docker-build #9098: Pull request #5281 opened by osterman
Action required cloudposse:osterman/ossf/scorecard-merge-queues-fix
cloudposse:osterman/ossf/scorecard-merge-queues-fix
Action required
✨ Add experimental Changelog check docker-build #9097: Pull request #5017 synchronize by kehoecj
Action required kehoecj:add-changelog-check
kehoecj:add-changelog-check
Action required
✨ Adds support for Actions lock files to detect pinning docker-build #9096: Pull request #5247 synchronize by jessehouwing
Action required jessehouwing:main
jessehouwing:main
Action required
✨ Treat GitHub Actions pinned to immutable releases as pinned dependencies docker-build #9095: Pull request #5248 synchronize by jessehouwing
Action required jessehouwing:gh-actions-immutable-release-pinning
jessehouwing:gh-actions-immutable-release-pinning
Action required
✨ Treat GitHub Actions pinned to immutable releases as pinned dependencies docker-build #9094: Pull request #5248 synchronize by jessehouwing
Action required jessehouwing:gh-actions-immutable-release-pinning
jessehouwing:gh-actions-immutable-release-pinning
Action required
✨ Treat GitHub Actions pinned to immutable releases as pinned dependencies docker-build #9093: Pull request #5248 synchronize by jessehouwing
Action required jessehouwing:gh-actions-immutable-release-pinning
jessehouwing:gh-actions-immutable-release-pinning
Action required
✨ SAST - remove all references to LGTM.com docker-build #9092: Pull request #4985 synchronize by Kielek
4m 31s Kielek:remove-lgtm-com
Kielek:remove-lgtm-com
4m 31s
🌱 Bump github.com/prometheus/prometheus from 0.54.0 to 0.305.2 docker-build #9091: Pull request #5277 opened by justaugustus
4m 0s justaugustus:bump-prometheus-v0.305.2
justaugustus:bump-prometheus-v0.305.2
4m 0s
🌱 Bump github.com/google/ko from 0.18.1 to 0.19.1 in /tools docker-build #9090: Pull request #5276 opened by dependabot Bot
1m 46s dependabot/go_modules/tools/github.com/google/ko-0.19.1
dependabot/go_modules/tools/github.com/google/ko-0.19.1
1m 46s
🌱 Bump github.com/goreleaser/goreleaser/v2 from 2.12.2 to 2.18.2 in /tools docker-build #9089: Pull request #5275 opened by dependabot Bot
3m 2s dependabot/go_modules/tools/github.com/goreleaser/goreleaser/v2-2.18.2
dependabot/go_modules/tools/github.com/goreleaser/goreleaser/v2-2.18.2
3m 2s
🌱 Bump github.com/moby/buildkit from 0.26.3 to 0.33.0 docker-build #9088: Pull request #5274 opened by dependabot Bot
2m 1s dependabot/go_modules/github.com/moby/buildkit-0.33.0
dependabot/go_modules/github.com/moby/buildkit-0.33.0
2m 1s
🌱 Bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 docker-build #9087: Pull request #5266 synchronize by dependabot Bot
3m 47s dependabot/go_modules/go.yaml.in/yaml/v2-2.4.4
dependabot/go_modules/go.yaml.in/yaml/v2-2.4.4
3m 47s
🌱 Bump github.com/golangci/golangci-lint/v2 from 2.10.1 to 2.14.0 in /tools docker-build #9086: Pull request #5267 synchronize by dependabot Bot
3m 58s dependabot/go_modules/tools/github.com/golangci/golangci-lint/v2-2.14.0
dependabot/go_modules/tools/github.com/golangci/golangci-lint/v2-2.14.0
3m 58s
🌱 Bump cloud.google.com/go/storage from 1.62.3 to 1.68.0 in the gomod group across 1 directory docker-build #9085: Pull request #5273 opened by dependabot Bot
4m 40s dependabot/go_modules/gomod-2f9a5084dd
dependabot/go_modules/gomod-2f9a5084dd
4m 40s
🌱 go.mod: Bump go-git, containerd, sigstore-go, slack-go, go-pkcs12 docker-build #9084: Pull request #5271 synchronize by justaugustus
4m 37s justaugustus:fix-root-vulns
justaugustus:fix-root-vulns
4m 37s
🌱 go.mod: Bump go-git, containerd, sigstore-go, slack-go, go-pkcs12 docker-build #9083: Pull request #5271 opened by justaugustus
3m 2s justaugustus:fix-root-vulns
justaugustus:fix-root-vulns
3m 2s
🐛 Fall back when Azure language metrics are unavailable docker-build #9082: Pull request #5130 synchronize by JamieMagee
4m 40s JamieMagee:jamiemagee/azure-language-fallback
JamieMagee:jamiemagee/azure-language-fallback
4m 40s
🌱 Bump the gomod group across 2 directories with 16 updates docker-build #9081: Pull request #5270 opened by dependabot Bot
4m 7s dependabot/go_modules/gomod-22b2d3f8fe
dependabot/go_modules/gomod-22b2d3f8fe
4m 7s