Skip to content

Pull requests: ossf/scorecard

New pull request New
51 Open 3,730 Closed
51 Open 3,730 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

🌱 Bump chainguard/static from 5e9c881 to 60582b2 dependencies Pull requests that update a dependency file docker Pull requests that update Docker code size:XS This PR changes 0-9 lines, ignoring generated files.
#5123 opened Jul 13, 2026 by dependabot Bot Loading…
🌱 Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files.
#5121 opened Jul 10, 2026 by dependabot Bot Loading…
🌱 Bump golang.org/x/crypto from 0.50.0 to 0.52.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code size:S This PR changes 10-29 lines, ignoring generated files.
#5120 opened Jul 10, 2026 by dependabot Bot Loading…
1
🌱 Bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:S This PR changes 10-29 lines, ignoring generated files.
#5119 opened Jul 10, 2026 by dependabot Bot Loading…
1
🐛 Fix Prow revision ID guard for lgtm-labeled commits size:XS This PR changes 0-9 lines, ignoring generated files.
#5118 opened Jul 8, 2026 by arpitjain099 Loading…
2 tasks done
✨ Add --skip-errors option to continue scans on check/probe failures size:M This PR changes 30-99 lines, ignoring generated files.
#5117 opened Jul 6, 2026 by jimjag Loading…
2 tasks done
🌱 Bump goreleaser/goreleaser-action from 7.0.0 to 7.2.3 dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code size:XS This PR changes 0-9 lines, ignoring generated files.
#5116 opened Jul 6, 2026 by dependabot Bot Loading…
📖 Clarify Scorecard webviewer references size:XS This PR changes 0-9 lines, ignoring generated files.
#5115 opened Jul 6, 2026 by stacknil Loading…
1 of 2 tasks
1
Detect more untrusted workflow inputs size:XS This PR changes 0-9 lines, ignoring generated files.
#5114 opened Jul 4, 2026 by Kurrisua Loading…
2 tasks done
1
🌱 Bump golang.org/x/net from 0.53.0 to 0.55.0 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:S This PR changes 10-29 lines, ignoring generated files.
#5113 opened Jul 4, 2026 by dependabot Bot Loading…
1
fix: fallback to REST API for fine-grained PAT in CheckRuns size:XS This PR changes 0-9 lines, ignoring generated files.
#5112 opened Jul 3, 2026 by anushkagupta200615-jpg Loading…
1 of 2 tasks
1
🌱 Hoist regex compilation out of hot paths in pinned_dependencies size:S This PR changes 10-29 lines, ignoring generated files.
#5111 opened Jul 3, 2026 by matiasinsaurralde Loading…
2 tasks done
🌱 Bump golang.org/x/net from 0.53.0 to 0.55.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5110 opened Jul 1, 2026 by dependabot Bot Loading…
2
🌱 Bump github.com/sigstore/timestamp-authority/v2 from 2.0.6 to 2.1.0 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files. Stale
#5109 opened Jul 1, 2026 by dependabot Bot Loading…
2
🌱 Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files. Stale
#5108 opened Jun 30, 2026 by dependabot Bot Loading…
1
🌱 Bump the gomod group across 2 directories with 20 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code size:XL This PR changes 500-999 lines, ignoring generated files.
#5107 opened Jun 29, 2026 by dependabot Bot Loading…
1
🌱 Bump the github-actions group across 1 directory with 13 updates dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code size:XS This PR changes 0-9 lines, ignoring generated files.
#5106 opened Jun 29, 2026 by dependabot Bot Loading…
🌱 Bump actions/setup-go from 6.3.0 to 6.5.0 dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code size:XS This PR changes 0-9 lines, ignoring generated files. Stale
#5105 opened Jun 29, 2026 by dependabot Bot Loading…
1
Detect commit committer fields in dangerous workflows size:XS This PR changes 0-9 lines, ignoring generated files. Stale
#5104 opened Jun 28, 2026 by Tom3306 Loading…
1
checks/sast: detect Semgrep, Bandit, and gosec SAST workflows size:M This PR changes 30-99 lines, ignoring generated files. Stale
#5103 opened Jun 23, 2026 by DevamShah Loading…
2 tasks done
1
✨ Add support for Winget package manager integration size:L This PR changes 100-499 lines, ignoring generated files. Stale
#5101 opened Jun 21, 2026 by andy778 Loading…
2 tasks done
1
5
🌱 Normalize extracted file paths across repository handlers size:M This PR changes 30-99 lines, ignoring generated files. Stale
#5099 opened Jun 20, 2026 by Tanishq-mellu Loading…
4
fix: detect committer context in dangerous workflows size:XS This PR changes 0-9 lines, ignoring generated files. Stale
#5098 opened Jun 17, 2026 by omobolajiadeyan Loading…
1
3
✨ Add packaging workflow detection for changesets size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5097 opened Jun 16, 2026 by gr2m Loading…
2 tasks done
1
3
Fix tag-only release checks size:L This PR changes 100-499 lines, ignoring generated files. Stale
#5095 opened Jun 14, 2026 by din-arr Loading…
2 tasks done
1
ProTip! Adding no:label will show everything without a label.