Skip to content

chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 #920

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 9 commits into from
Closed

chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 #920

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
bec3796
chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
dependabot[bot] Aug 10, 2026
d7ca779
test(scorecard): pin one action SHA across PR and scheduled scans
seonghobae Aug 13, 2026
c0079d1
fix(coverage): accept only bounded relative requirement includes
seonghobae Aug 13, 2026
c94deed
chore(scorecard): drop unrelated materializer delta
seonghobae Aug 14, 2026
0b341f1
chore(scorecard): restore bounded dependency-update scope
seonghobae Aug 15, 2026
3ed996c
merge(main): resolve DIRTY #920 against current main
seonghobae Aug 16, 2026
ed08a94
Merge main and refresh Scorecard pin contract
seonghobae Aug 20, 2026
e551215
Merge branch 'main' into dependabot/github_actions/main/ossf/scorecar…
opencode-agent[bot] Aug 20, 2026
b9a0cc3
Merge branch 'main' into dependabot/github_actions/main/ossf/scorecar…
opencode-agent[bot] Aug 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/scorecard-analysis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
persist-credentials: false

- name: Run analysis
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
with:
results_file: results.sarif
results_format: sarif
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scorecard-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ jobs:
persist-credentials: false

- name: Run analysis
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
with:
results_file: results.sarif
results_format: sarif
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/security-scan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -408,7 +408,7 @@ jobs:
with:
persist-credentials: false
- name: Run Scorecard
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
with:
results_file: results.sarif
results_format: sarif
Expand Down
Loading