Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cole/witness #1

Open
wants to merge 12 commits into
base: victor/slsa
Choose a base branch
from
Open

Cole/witness #1

wants to merge 12 commits into from

Conversation

colek42
Copy link
Member

@colek42 colek42 commented Apr 7, 2023

Pull request check list

  • Proper tests/regressions included?
  • Documentation updated?

Affected functionality

Description of change

Which issue this pull requests fixes

.github/workflows/release.yml Fixed Show fixed Hide fixed
.github/workflows/release.yml Fixed Show fixed Hide fixed
.github/workflows/release.yml Fixed Show fixed Hide fixed
.github/workflows/release.yml Fixed Show fixed Hide fixed

- name: Run GoReleaser
id: run-goreleaser
uses: goreleaser/goreleaser-action@8f67e590f2d095516493f017008adc464e63adb1 # v4.1.0
uses: testifysec/witness-run-action@main

Check warning

Code scanning / Scorecard

Pinned-Dependencies

score is 5: third-party GitHubAction not pinned by hash Click Remediation section below to solve this issue
dependabot bot and others added 5 commits April 18, 2023 03:46
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.2.0 to 3.3.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@537aa19...0ad9a09)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
provenance artifact with signature and sboms

Signed-off-by: Victor Vieira Barros Leal da Silveira <[email protected]>
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.3.1 to 3.4.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@0ad9a09...08e2f20)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@colek42 colek42 force-pushed the cole/witness branch 2 times, most recently from 1b04d08 to 69d694c Compare April 18, 2023 08:54
Cole Kennedy and others added 6 commits April 19, 2023 11:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants