Skip to content

ci: bump ossf/scorecard-action from 2.4.4 to 2.5.0 - #34

Merged
swade1987 merged 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.5.0
Oct 15, 2026
Merged

swade1987 merged 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ossf/scorecard-action from 2.4.4 to 2.5.0.

Release notes

Sourced from ossf/scorecard-action's releases.

v2.5.0

What's Changed

This release moves the action to Scorecard v5.6.0, the first Scorecard release since its hosted services moved to new infrastructure.

For changes to checks and results, and what the infrastructure move means for you, see the Scorecard v5.6.0 release notes.

Other

New Contributors

Full Changelog: ossf/scorecard-action@v2.4.4...v2.5.0

Commits
  • fa7117d Bump action tag for v2.5.0 release (#1720)
  • cef4eb5 🌱 Bump Scorecard to v5.6.0 (#1719)
  • bedb16e ✨ Add intoto results format (#1702)
  • de70347 Remove the leftover debug print of the auth token (#1709)
  • 950873d 🌱 Derive the reported Scorecard version from go.mod (#1718)
  • 2ce8ee4 🌱 Bump github.com/sigstore/cosign/v2 from 2.6.4 to 2.6.5 (#1695)
  • aabdf5a 🌱 Bump the github-actions group across 1 directory with 7 updates (#...
  • b4b9adf 🌱 CodeQL: Analyze workflows instead of a placeholder JavaScript file
  • 4e9f2a2 📖 RELEASE.md: Document drafting release notes
  • f618e8b 🌱 Build the image with Go 1.27.2 and refresh distroless
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from swade1987 as a code owner October 15, 2026 02:24
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.5.0 branch from 2811e15 to fc9b972 Compare October 15, 2026 07:45
@swade1987

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.4 to 2.5.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@2d11466...fa7117d)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.5.0 branch from fc9b972 to e9448f6 Compare October 15, 2026 07:47
@swade1987
swade1987 merged commit d500464 into main Oct 15, 2026
8 checks passed
@swade1987
swade1987 deleted the dependabot/github_actions/ossf/scorecard-action-2.5.0 branch October 15, 2026 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant