Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

github-actions

.github/workflows/scorecard.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.26.12@c36620d31ac7c881962c3d9dd939c40ec9434f2b

gomod

expander/go.mod

• go 1.22.5

gather/file/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather v0.0.3
• github.com/enterprise-contract/go-gather/expander v0.0.1
• github.com/enterprise-contract/go-gather/metadata v0.0.2
• github.com/enterprise-contract/go-gather/metadata/file v0.0.1
• github.com/enterprise-contract/go-gather/saver v0.0.2

gather/git/go.mod

• go 1.22.5
• github.com/chainguard-dev/git-urls v1.0.2
• github.com/enterprise-contract/go-gather v0.0.3
• github.com/enterprise-contract/go-gather/metadata v0.0.2
• github.com/enterprise-contract/go-gather/metadata/git v0.0.2
• github.com/go-git/go-git/v5 v5.12.0
• github.com/stretchr/testify v1.9.0

gather/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather v0.0.3
• github.com/enterprise-contract/go-gather/gather/file v0.0.1
• github.com/enterprise-contract/go-gather/gather/git v0.0.5
• github.com/enterprise-contract/go-gather/gather/http v0.0.2
• github.com/enterprise-contract/go-gather/gather/oci v0.0.4
• github.com/enterprise-contract/go-gather/metadata v0.0.2
• github.com/enterprise-contract/go-gather/metadata/git v0.0.2

gather/http/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather v0.0.3
• github.com/enterprise-contract/go-gather/metadata v0.0.2
• github.com/enterprise-contract/go-gather/metadata/http v0.0.1
• github.com/enterprise-contract/go-gather/saver v0.0.2
• github.com/stretchr/testify v1.9.0

gather/oci/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather/metadata v0.0.2
• github.com/enterprise-contract/go-gather/metadata/oci v0.0.3
• oras.land/oras-go/v2 v2.5.0
• github.com/opencontainers/image-spec v1.1.0
• github.com/spf13/viper v1.19.0
• github.com/stretchr/testify v1.9.0

go.mod

• go 1.22.5

metadata/file/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather/metadata v0.0.2

metadata/git/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather/metadata v0.0.2
• github.com/go-git/go-git/v5 v5.12.0
• github.com/stretchr/testify v1.9.0

metadata/go.mod

• go 1.22.5

metadata/http/go.mod

• go 1.22.5

metadata/oci/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather/metadata v0.0.2
• github.com/stretchr/testify v1.9.0

saver/file/go.mod

• go 1.22.5

saver/go.mod

• go 1.22.5
• github.com/enterprise-contract/go-gather/saver/file v0.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository