Commits

Branch selector

 main

User selector

All users

All time

Commit history

Commits on May 11, 2026

• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0

  Show description for b31732f
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  b31732f

  Copy full SHA for b31732f

Commits on Apr 28, 2026

• build(deps): bump github.com/rs/zerolog in the gomod group

  Show description for 7b25711
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  7b25711

  Copy full SHA for 7b25711

Commits on Apr 24, 2026

• chore: update scorecard to v5.5.0

  Show description for 476ff67
  

  2 peopleauthored and

  jeffmendoza

  committed
  476ff67

  Copy full SHA for 476ff67

Commits on Apr 22, 2026

• Add deadcode to CI and fix existing dead code (clearSARIFHashes)

  Show description for 6f36ce9
  

  Copilot

  and

  justaugustus

  committed
  6f36ce9

  Copy full SHA for 6f36ce9

Commits on Apr 21, 2026

• Remove dead code from scorecard SARIF upload logic

  Show description for 27d3a9a
  

  2 peopleauthored and

  justaugustus

  committed
  27d3a9a

  Copy full SHA for 27d3a9a

• build(deps): bump the github-owned group with 3 updates

  Show description for 6805570
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  6805570

  Copy full SHA for 6805570

• build(deps): bump step-security/harden-runner

  Show description for ef25f21
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  ef25f21

  Copy full SHA for ef25f21

Commits on Apr 18, 2026

• build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0

  Show description for 54ecbbc
  

  dependabot[bot]

  authored and

  jeffmendoza

  committed
  54ecbbc

  Copy full SHA for 54ecbbc

Commits on Apr 17, 2026

• fix: uncomment workflow_dispatch, resolve zizmor findings

  Show description for 80360db
  

  2 peopleauthored and

  jeffmendoza

  committed
  80360db

  Copy full SHA for 80360db

• ci: add zizmor workflow for GitHub Actions security linting

  Show description for 77ad97a
  

  2 peopleauthored and

  jeffmendoza

  committed
  77ad97a

  Copy full SHA for 77ad97a

• add: build-from-source workflow as allstar-from-ref.yml

  Show description for da2b9b8
  

  2 peopleauthored and

  jeffmendoza

  committed
  da2b9b8

  Copy full SHA for da2b9b8

• fix: analyze job resilience and concurrency control

  Show description for beb6f37
  

  2 peopleauthored and

  jeffmendoza

  committed
  beb6f37

  Copy full SHA for beb6f37

• harden: GitHub Action workflow security

  Show description for 6bbde4d
  

  2 peopleauthored and

  jeffmendoza

  committed
  6bbde4d

  Copy full SHA for 6bbde4d

• move: example workflow to .github/workflows/allstar.yml

  Show description for f360243
  

  2 peopleauthored and

  jeffmendoza

  committed
  f360243

  Copy full SHA for f360243

• docs: Fix `Allstar` casing

  Show description for 306fa8e
  

  justaugustus

  authored and

  jeffmendoza

  committed
  306fa8e

  Copy full SHA for 306fa8e

• fix: remove stale deps and extract issue state constants

  Show description for 53e291f
  

  2 peopleauthored and

  jeffmendoza

  committed
  53e291f

  Copy full SHA for 53e291f

• go.mod: Bump scorecard/v5 to v5.4.1-0.20260416042454-4b8e9d1b5db8

  Show description for dd76667
  

  justaugustus

  authored and

  jeffmendoza

  committed
  dd76667

  Copy full SHA for dd76667

Commits on Apr 15, 2026

• scorecard: fix tests — add t.Cleanup and strengthen skip assertions

  Show description for 7af507d
  

  2 peopleauthored and

  jeffmendoza

  committed
  7af507d

  Copy full SHA for 7af507d

• scorecard: rename uploadSARIFResult, add error path tests

  Show description for 228a7d1
  

  2 peopleauthored and

  jeffmendoza

  committed
  228a7d1

  Copy full SHA for 228a7d1

Commits on Apr 14, 2026

• fix: declare allRes in outer scope to fix compilation error

  Show description for 2918895
  

  Copilot

  and

  jeffmendoza

  committed
  2918895

  Copy full SHA for 2918895

• Update pkg/policies/scorecard/scorecard.go

  Show description for c9903d3
  

  jeffmendoza

  and

  Copilot

  committed
  c9903d3

  Copy full SHA for c9903d3

• Apply suggestions from code review

  Show description for 45eb765
  

  jeffmendoza

  and

  Copilot

  committed
  45eb765

  Copy full SHA for 45eb765

• openspec: mark consolidation tasks as completed

  Show description for 9b9966b
  

  2 peopleauthored and

  jeffmendoza

  committed
  9b9966b

  Copy full SHA for 9b9966b

• scorecard: consolidate to single scRun() call

  Show description for e87c61b
  

  2 peopleauthored and

  jeffmendoza

  committed
  e87c61b

  Copy full SHA for e87c61b

• openspec: archive evidence-upload, propose check consolidation

  Show description for 45d27c7
  

  2 peopleauthored and

  jeffmendoza

  committed
  45d27c7

  Copy full SHA for 45d27c7

Commits on Apr 13, 2026

• build(deps): bump actions/upload-artifact in the github-owned group

  Show description for f469598
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  f469598

  Copy full SHA for f469598

• build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0

  Show description for 9dcc2e6
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  9dcc2e6

  Copy full SHA for 9dcc2e6

• build(deps): bump step-security/harden-runner

  Show description for 3ca4d88
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  3ca4d88

  Copy full SHA for 3ca4d88

Commits on Apr 6, 2026

• fix: allow runtime-spec replace directive in gomoddirectives lint config

  Show description for 737a091
  

  Copilot

  and

  justaugustus

  committed
  737a091

  Copy full SHA for 737a091

• fix: pin opencontainers/runtime-spec to v1.2.1 for containerd v1.7.x compatibility

  Show description for be138a0
  

  Copilot

  and

  justaugustus

  committed
  be138a0

  Copy full SHA for be138a0

• build(deps): bump github.com/moby/buildkit from 0.26.3 to 0.28.1

  Show description for 2001a5e
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  2001a5e

  Copy full SHA for 2001a5e

• build(deps): bump github.com/go-git/go-git/v5 in the gomod group

  Show description for 349c9d6
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  349c9d6

  Copy full SHA for 349c9d6

• build(deps): bump step-security/harden-runner

  Show description for 506ef02
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  506ef02

  Copy full SHA for 506ef02

• build(deps): bump github.com/rhysd/actionlint in the gomod group

  Show description for 3e56a16
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  3e56a16

  Copy full SHA for 3e56a16

• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4

  Show description for 161a864
  

  dependabot[bot]

  authored and

  justaugustus

  committed
  161a864

  Copy full SHA for 161a864