15 Pull requests merged by 6 people

• 🌱 Bump the distroless group across 6 directories with 1 update

  #4488 merged Jan 17, 2025

• 🌱 Bump the github-actions group across 1 directory with 5 updates

  #4492 merged Jan 17, 2025

• 🌱 Bump the gomod group across 2 directories with 3 updates

  #4485 merged Jan 17, 2025

• 🌱 Logging a warning if readGitHubTokens finds several values which clash.

  #4483 merged Jan 9, 2025

• 📖 Update Metal3 repos in projects.csv

  #4442 merged Jan 7, 2025

• 🌱 Add Chromium project dependencies to automated scanning

  #4476 merged Jan 7, 2025

• 📖 governance: Add meeting note archives from 2021 through 2024

  #4482 merged Jan 6, 2025

• 🌱 Bump the gomod group across 2 directories with 6 updates

  #4481 merged Jan 6, 2025

• 🌱 Bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.4 in /tools

  #4479 merged Jan 6, 2025

• 🌱 Bump github.com/rhysd/actionlint from 1.7.4 to 1.7.6

  #4478 merged Jan 6, 2025

• 🌱 Bump github.com/google/osv-scanner from 1.9.0 to 1.9.2

  #4464 merged Jan 2, 2025

• ✨ implement more of the Azure DevOps client

  #4456 merged Dec 31, 2024

• 🌱 Bump the gomod group across 2 directories with 3 updates

  #4470 merged Dec 31, 2024

• 🌱 Bump the gomod group across 2 directories with 4 updates

  #4469 merged Dec 23, 2024

• 🌱 Bump the github-actions group across 1 directory with 3 updates

  #4467 merged Dec 23, 2024

2 Pull requests opened by 2 people

• :sparkles: Add GitHub git compatibility mode

  #4474 opened Dec 31, 2024

• :sparkles: Support results output as in-toto statement

  #4491 opened Jan 16, 2025

6 Issues closed by 2 people

• Apparently GlobaLeaks CI-Tests seems not recognized.

  #4393 closed Jan 17, 2025

• Detect and warn about conflicting Github Tokens

  #4475 closed Jan 9, 2025

• BigQuery scorecard-v2 table doesn't have new partitions

  #4443 closed Dec 23, 2024

• Feature (Question) Git merging strategy

  #4454 closed Dec 23, 2024

• BUG: CODEOWNERS file not located

  #4462 closed Dec 18, 2024

• BUG: Security policy is not detected in GitHub repository

  #4463 closed Dec 18, 2024

3 Issues opened by 3 people

• Align Dangerous Workflow check with CodeQL rules, or defer to it entirely

  #4490 opened Jan 15, 2025

• Feature: Support GitHub Immutable Actions, don't enforce pinning by digest for those

  #4489 opened Jan 14, 2025

• Best Practices WG 2024 Q4 TAC follow-ups

  #4484 opened Jan 8, 2025

6 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• :bug: Add a workaround for organisations in GitLab

  #4415 commented on Jan 9, 2025 • 1 new comment

• BUG: Scorecard can't analyze files which are `export-ignore`'d in a .gitattributes file

  #2489 commented on Dec 31, 2024 • 0 new comments

• Feature: Check custom CII Best Practices URL

  #4315 commented on Jan 6, 2025 • 0 new comments

• Add more options for Pinned-Dependencies

  #3618 commented on Jan 7, 2025 • 0 new comments

• Support setting for repository wide read-only token

  #2633 commented on Jan 11, 2025 • 0 new comments

• Output Scorecard results as in-toto attestation

  #3352 commented on Jan 17, 2025 • 0 new comments