dependabot[bot]
7d8e500413
Bump ossf/scorecard-action ( #1899 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 5da1b6b2680a229f2e66131f5c6a692bcd80b246 to 1.0.2. This release includes the previously tagged commit.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Commits](https://github.com/ossf/scorecard-action/compare/5da1b6b2680a229f2e66131f5c6a692bcd80b246...c8416b0b2bf627c349ca92fc8e3de51a64b005cf )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-31 04:04:17 -05:00
dependabot[bot]
794e9d1834
Bump github/codeql-action from 1.0.26 to 1.0.30 ( #1901 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1.0.26 to 1.0.30.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/5f532563584d71fdef14ee64d17bafb34f751ce5...8b37404d562d866ad6a65d0ecb4fa5131e047ca4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-31 04:03:53 -05:00
Jason Hall
d587122a9d
Run GitHub Actions on pushes and PRs to main, not master ( #1883 )
...
* Run GitHub Actions on pushes and PRs to main, not master
* fix go install ecr-login, bump to latest v0.6.0
* master -> main in some integration tests
* skip no-ref integration test
2022-01-14 14:54:12 -05:00
priyawadhwa
986121553b
Pin to more recent version of scorecard ( #1878 )
2022-01-11 10:42:21 -08:00
priyawadhwa
ae2c269cc0
Add scorecard analysis to kaniko ( #1874 )
2022-01-11 10:24:55 -08:00
dependabot[bot]