Morph MORPH
SIGN IN SIGN UP
dhruvhead / scorecard UNCLAIMED
0 0 1 Go

COMMITS

main
May 19, 2026
D
:seedling: Bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#5067)
dependabot[bot] committed
916bfc5
May 12, 2026
D
:seedling: Bump github.com/in-toto/in-toto-golang in /tools (#5050)
dependabot[bot] committed
cf383a0
D
:seedling: Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#5054)
dependabot[bot] committed
197a165
May 4, 2026
D
:seedling: Bump the github-actions group across 1 directory with 8 updates (#5029)
dependabot[bot] committed
117f744
April 29, 2026
T
:sparkles: Update unsafeblock probe to detect use of Java's Unsafe classes (#4849)
Thomas Leplus committed
4986a99
April 27, 2026
A
🌱 ci: use ginkgo --flake-attempts instead of nick-invision/retry for e2e tests (#5013)
Ali Asghar committed
cc033d6
April 23, 2026
A
docs: clarify partial credit for branch protection tiers (#5010)
aban-alazzeh committed
09a80e3
D
:book: Set GitLab support for Code-Review and Dependency-Update-Tool (#4963)
Diogo Correia committed
b6c394c
S
:bug: Fix check metadata which skipped some supported checks (#5034)
Spencer Schrock committed
c395761
D
:seedling: Bump the distroless group across 6 directories with 1 update (#5016)
dependabot[bot] committed
1852490
D
:seedling: Bump the golang group across 8 directories with 1 update (#5015)
dependabot[bot] committed
5d3ec19
D
:seedling: Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.18.0 (#5032)
dependabot[bot] committed
be6efba
D
:seedling: Bump github.com/jackc/pgx/v5 from 5.7.6 to 5.9.2 in /tools (#5031)
dependabot[bot] committed
cf2aef8
April 17, 2026
J
:seedling: Add @JamieMagee as codeowner for Azure DevOps client (#5024)
Jamie Magee committed
a1d03ef
April 16, 2026
D
:seedling: Bump github.com/sigstore/timestamp-authority/v2 in /tools (#5018)
dependabot[bot] committed
4b8e9d1
D
:seedling: Bump github.com/aws/aws-sdk-go-v2/service/s3 in /tools (#5007)
dependabot[bot] committed
424f70c
D
:seedling: Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 (#5011)
dependabot[bot] committed
29f186e
D
:seedling: Bump go.opentelemetry.io/otel/sdk in /tools (#5012)
dependabot[bot] committed
e8b8afe
D
:seedling: Bump github.com/go-jose/go-jose/v4 in /tools (#4999)
dependabot[bot] committed
5ee2014
April 8, 2026
J
:sparkles: Skip checks that don't apply to the current repo type (#5000)
Jamie Magee committed
81b3804
D
:seedling: Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#4998)
dependabot[bot] committed
56e538e
M
fix: Fix PR template formatting (#5003)
Martin Costello committed
b037ee6
April 6, 2026
J
:seedling: e2e: add Azure DevOps tests (#4993)
Jamie Magee committed
9ee282d
March 30, 2026
S
:book: Scorecard v6: OSPS Baseline conformance proposal and 2026 roadmap (#4952)
Stephen Augustus committed
76c3e11
March 24, 2026
D
:seedling: Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#4943)
dependabot[bot] committed
33539d6
March 23, 2026
D
:seedling: Bump actions/setup-go from 6.2.0 to 6.3.0 (#4955)
dependabot[bot] committed
1d5ea07
D
:seedling: Bump the distroless group across 6 directories with 1 update (#4935)
dependabot[bot] committed
b66ce4b
D
:seedling: Bump the golang group across 8 directories with 1 update (#4962)
dependabot[bot] committed
0fb965a
D
:seedling: Bump the github-actions group across 1 directory with 10 updates (#4975)
dependabot[bot] committed
3cc3ff4
D
:seedling: Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#4949)
dependabot[bot] committed
d6d372e