Skip to content

Actions: spaze/michalspacek.cz

Actions

Scorecard supply-chain security

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
scorecard.yml
116 workflow runs
116 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Rename the file because it now does more checks than just Composer Scorecard supply-chain security #16: Commit 3970a77 pushed by spaze
May 9, 2024 02:47 56s main
main
May 9, 2024 02:47 56s
Rename the file because it now does more checks than just Composer Scorecard supply-chain security #15: Commit 2077ca3 pushed by spaze
May 9, 2024 02:13 2m 27s main
main
May 9, 2024 02:13 2m 27s
Run Dependabot updates monthly for NPM and Composer, as a last resort… Scorecard supply-chain security #14: Commit cf44ea2 pushed by spaze
May 9, 2024 02:10 54s main
main
May 9, 2024 02:10 54s
Scorecard supply-chain security Scorecard supply-chain security #13: Manually run by spaze
May 8, 2024 17:44 46s main
main
May 8, 2024 17:44 46s
Seems like there should be this link for the file to be accepted (#326) Scorecard supply-chain security #12: Commit 7acbe94 pushed by spaze
May 8, 2024 17:30 43s main
main
May 8, 2024 17:30 43s
Copy vuln reporting to SECURITY.md (#325) Scorecard supply-chain security #11: Commit bd6ba25 pushed by spaze
May 8, 2024 16:20 48s main
main
May 8, 2024 16:20 48s
Allow both direct and indirect Dependabot updates for all packages (#… Scorecard supply-chain security #10: Commit 79a9c52 pushed by spaze
May 8, 2024 15:13 46s main
main
May 8, 2024 15:13 46s
Update packages, just nette/database (#322) Scorecard supply-chain security #9: Commit 8294231 pushed by spaze
May 8, 2024 15:03 1m 1s main
main
May 8, 2024 15:03 1m 1s
CodeQL reports a rest element but that's a spread syntax in the `dump… Scorecard supply-chain security #8: Commit 6ac01b5 pushed by spaze
May 8, 2024 06:22 47s main
main
May 8, 2024 06:22 47s
Update package nette/forms (#320) Scorecard supply-chain security #7: Commit b0ec2cd pushed by spaze
May 8, 2024 05:43 47s main
main
May 8, 2024 05:43 47s
Tell Dependabot to vendor dependencies when updating them (#318) Scorecard supply-chain security #6: Commit abdf40e pushed by spaze
May 8, 2024 04:37 43s main
main
May 8, 2024 04:37 43s
Scan Composer dependencies with Dependabot, too (#315) Scorecard supply-chain security #5: Commit 74c898a pushed by spaze
May 8, 2024 04:25 43s main
main
May 8, 2024 04:25 43s
Bump actions/checkout from 4.1.4 to 4.1.5 (#312) Scorecard supply-chain security #4: Commit 203f68f pushed by spaze
May 8, 2024 04:17 44s main
main
May 8, 2024 04:17 44s
Add top level read permission to CodeQL config (#314) Scorecard supply-chain security #3: Commit 32ac1e1 pushed by spaze
May 8, 2024 04:15 43s main
main
May 8, 2024 04:15 43s
Resolve security alerts, at least most of them (#311) Scorecard supply-chain security #2: Commit 6a63c2b pushed by spaze
May 8, 2024 03:54 53s main
main
May 8, 2024 03:54 53s
Add the OpenSSF Scorecards GitHub Action (#307) Scorecard supply-chain security #1: Commit 725cd42 pushed by spaze
May 8, 2024 02:23 43s main
main
May 8, 2024 02:23 43s