Below you will find pages that utilize the taxonomy term “ossf”
July 27, 2024
OSSF Scorecard action
Version updated for ossf/scorecard-action to version v2.4.0.
This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 0 repositories. Go to the GitHub Marketplace to find the latest changes.
Release notes What’s Changed This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives.
May 10, 2024
OSSF Scorecard action
Version updated for ossf/scorecard-action to version v2.3.3.
This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 0 repositories. Go to the GitHub Marketplace to find the latest changes.
Release notes [!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag
What’s Changed :seedling: Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by @spencerschrock in https://github.
October 24, 2023
OSSF Scorecard action
Version updated for ossf/scorecard-action to version v2.3.1.
This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 0 repositories. Go to the GitHub Marketplace to find the latest changes.
Release notes What’s Changed :seedling: Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1282 Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.
October 7, 2023
OSSF Scorecard action
Version updated for ossf/scorecard-action to version v2.3.0.
This publisher is shown as erified by GitHub. This action is used across all versions by 0 repositories. Go to the GitHub Marketplace to find the latest changes.
Release notes What’s Changed :seedling: Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1270 For a full changelist of what this includes, see the v4.12.0 and v4.13.0 release notes :sparkles: Send rekor tlog index to webapp when publishing results by @spencerschrock in https://github.