5 Pull requests merged by 2 people

• 🌱 Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 in /tools

  #4320 merged Aug 29, 2024

• 🌱 Bump github/codeql-action from 3.26.0 to 3.26.6 in the github-actions group across 1 directory

  #4321 merged Aug 29, 2024

• 🌱 Bump github.com/google/osv-scanner from 1.8.3 to 1.8.4

  #4313 merged Aug 29, 2024

• 🌱 Bump gocloud.dev from 0.38.0 to 0.39.0

  #4302 merged Aug 29, 2024

• Remediation for github branch protection 📖

  #4316 merged Aug 29, 2024

7 Pull requests opened by 3 people

• :book: explicitly state both check documentation files are committed

  #4317 opened Aug 28, 2024

• :book: clarify project goals and non-goals

  #4318 opened Aug 28, 2024

• :seedling: Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2

  #4319 opened Aug 29, 2024

• :seedling: Require minimum version of Go 1.22.0

  #4322 opened Aug 29, 2024

• ✨ Update SPDX license list, source for license data

  #4323 opened Aug 30, 2024

• :seedling: Bump cloud.google.com/go/pubsub from 1.41.0 to 1.42.0

  #4324 opened Aug 30, 2024

• :seedling: Bump mvdan.cc/sh/v3 from 3.8.0 to 3.9.0

  #4325 opened Aug 30, 2024

2 Issues opened by 2 people

• Method for providing certificates for private GitLab server

  #4326 opened Aug 30, 2024

• Feature: Check custom CII Best Practices URL

  #4315 opened Aug 27, 2024

13 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• :sparkles: Add machine-readable patch to fix script injections in workflows

  #4218 commented on Aug 29, 2024 • 8 new comments

• update the SPDX license list

  #4031 commented on Aug 26, 2024 • 0 new comments

• Feature: Document whether scorecard should be used as a requirement for organizations consuming OSS

  #4219 commented on Aug 26, 2024 • 0 new comments

• Feature: maintainer annotation

  #1907 commented on Aug 29, 2024 • 0 new comments

• Synchronize community health files across OpenSSF Scorecard repos

  #4194 commented on Aug 30, 2024 • 0 new comments

• [Docs] Clarify licensing information for bigquery public dataset

  #4143 commented on Aug 30, 2024 • 0 new comments

• the `Signed-Releases` remediation steps encourage manual manipulation of the source code archives

  #4018 commented on Aug 30, 2024 • 0 new comments

• Output Scorecard results as in-toto attestation

  #3352 commented on Aug 30, 2024 • 0 new comments

• Feature: Support for Azure DevOps

  #4177 commented on Aug 30, 2024 • 0 new comments

• Update Code Section Format in Readme

  #4272 commented on Aug 30, 2024 • 0 new comments

• ✨ Add check ID

  #4021 commented on Aug 30, 2024 • 0 new comments

• [DRAFT] governance: Draft Incubation application submission

  #4200 commented on Aug 30, 2024 • 0 new comments

• Update verify.yml

  #4310 commented on Aug 28, 2024 • 0 new comments