Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ossf/scorecard-action
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.1.1
Choose a base ref
...
head repository: ossf/scorecard-action
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.1.2
Choose a head ref
  • 6 commits
  • 9 files changed
  • 2 contributors

Commits on Dec 20, 2022

  1. 🌱 Bump actions/setup-go from 3.4.0 to 3.5.0 

    Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@d0a58c1...6edd440)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Dec 20, 2022
    Configuration menu
    Copy the full SHA
    5ce49db View commit details
    Browse the repository at this point in the history

  2. 🌱 Bump actions/upload-artifact from 3.1.0 to 3.1.1 

    Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@3cea537...83fd05a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Dec 20, 2022
    Configuration menu
    Copy the full SHA
    ce8978e View commit details
    Browse the repository at this point in the history

  3. 🌱 Bump github/codeql-action from 2.1.36 to 2.1.37 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.36 to 2.1.37.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2.1.36...959cbb7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Dec 20, 2022
    Configuration menu
    Copy the full SHA
    f93c094 View commit details
    Browse the repository at this point in the history

  4. 🌱 Bump actions/dependency-review-action from 3.0.1 to 3.0.2 

    Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@1131052...0ff3da6)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Dec 20, 2022
    Configuration menu
    Copy the full SHA
    013c0f8 View commit details
    Browse the repository at this point in the history

Commits on Dec 21, 2022

  1. Bump scorecard to v4.10.2 to remove a CODEOWNERS printf statement. (#… 

    …1054)

Signed-off-by: Spencer Schrock <sschrock@google.com>

Signed-off-by: Spencer Schrock <sschrock@google.com>
    @spencerschrock
    spencerschrock authored Dec 21, 2022
    Configuration menu
    Copy the full SHA
    7da02bf View commit details
    Browse the repository at this point in the history

  2. Bump docker tag for release. (#1055) 

    Signed-off-by: Spencer Schrock <sschrock@google.com>

Signed-off-by: Spencer Schrock <sschrock@google.com>
    @spencerschrock
    spencerschrock authored Dec 21, 2022
    Configuration menu
    Copy the full SHA
    e38b190 View commit details
    Browse the repository at this point in the history
Loading