jetstack/tally issues and pull requests

#94 - Bump modernc.org/sqlite from 1.24.0 to 1.25.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, go, size/S

#93 - Bump github.com/anchore/syft from 0.83.1 to 0.86.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, go, size/M

#92 - Bump github.com/anchore/syft from 0.83.1 to 0.86.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, go, size/M

#91 - Bump github.com/anchore/syft from 0.83.1 to 0.85.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, go, size/M

#90 - Bump modernc.org/sqlite from 1.23.1 to 1.24.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, size/XS, go

#89 - Bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.4

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, size/XS, go

#88 - Bump github.com/anchore/syft from 0.83.1 to 0.84.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, go, size/S

#87 - Bump sigstore/cosign-installer from 3.0.5 to 3.1.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, github_actions, size/XS

#86 - Bump github.com/anchore/syft from 0.83.1 to 0.84.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/S

#85 - Bump github.com/ossf/scorecard-webapp from 1.0.4 to 1.0.5

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/XL

#84 - Bump sigstore/cosign-installer from 3.0.5 to 3.1.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, github_actions, size/XS

#83 - Bump golang.org/x/sync from 0.2.0 to 0.3.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#82 - Bump github.com/anchore/syft from 0.82.0 to 0.83.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/L

#81 - Bump github.com/package-url/packageurl-go from 0.1.1-0.20220428063043-89078438f170 to 0.1.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#80 - Bump modernc.org/sqlite from 1.23.0 to 1.23.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#79 - Bump github.com/anchore/syft from 0.82.0 to 0.83.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/M

#78 - Bump docker/login-action from 2.1.0 to 2.2.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions, size/XS

#77 - Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#76 - Bump modernc.org/sqlite from 1.22.1 to 1.23.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#75 - Bump github.com/anchore/syft from 0.81.0 to 0.82.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/S

#74 - Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#73 - Bump github.com/anchore/syft from 0.76.0 to 0.81.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/L

#72 - Bump sigstore/cosign-installer from 3.0.3 to 3.0.5

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions, size/XS

#71 - Bump golang.org/x/sync from 0.1.0 to 0.2.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#70 - Bump github.com/anchore/syft from 0.76.0 to 0.80.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/L

#69 - Bump modernc.org/sqlite from 1.21.1 to 1.22.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/S

#68 - Bump sigstore/cosign-installer from 3.0.1 to 3.0.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions, size/XS

#67 - Bump modernc.org/sqlite from 1.21.1 to 1.22.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/S

#66 - Bump github.com/anchore/syft from 0.76.0 to 0.79.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/L

#65 - Bump github.com/anchore/syft from 0.76.0 to 0.77.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/M

#64 - Bump github.com/anchore/syft from 0.76.0 to 0.76.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, size/XS, go

#63 - Bump github.com/spf13/cobra from 1.6.1 to 1.7.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#62 - Bump sigstore/cosign-installer from 3.0.1 to 3.0.2

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, github_actions, size/XS

#61 - Bump github.com/anchore/syft from 0.75.0 to 0.76.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#60 - Bump github.com/ossf/scorecard-webapp from 1.0.3 to 1.0.4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#59 - Bump github.com/CycloneDX/cyclonedx-go from 0.7.1-0.20221222100750-41a1ac565cce to 0.7.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#58 - Identify wrong BOM format

Issue - State: open - Opened by ribbybibby over 1 year ago
Labels: enhancement, good first issue

#57 - Detect BOM format

Issue - State: open - Opened by ribbybibby over 1 year ago
Labels: enhancement, good first issue

#56 - Bump github.com/ossf/scorecard/v4 from 4.10.2 to 4.10.5

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/XXL

#55 - Bump actions/setup-go from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions, size/XS

#54 - Bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/M

#53 - Bump github.com/ossf/scorecard/v4 from 4.10.2 to 4.10.4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/L

#52 - Bump google.golang.org/api from 0.112.0 to 0.114.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#51 - Bump cloud.google.com/go/bigquery from 1.48.0 to 1.49.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/S

#50 - Bump google.golang.org/api from 0.111.0 to 0.112.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#49 - Bump github.com/klauspost/compress from 1.16.0 to 1.16.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#48 - Bump github.com/cheggaaa/pb/v3 from 3.1.0 to 3.1.2

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/S

#47 - Bump sigstore/cosign-installer from 2.8.1 to 3.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions, size/XS

#46 - Bump google.golang.org/api from 0.109.0 to 0.111.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/S

#45 - Bump cloud.google.com/go/bigquery from 1.46.0 to 1.48.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#44 - Bump modernc.org/sqlite from 1.20.4 to 1.21.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#43 - Bump github.com/klauspost/compress from 1.15.15 to 1.16.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#42 - Bump cloud.google.com/go/bigquery from 1.46.0 to 1.47.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/M

#41 - Bump google.golang.org/api from 0.109.0 to 0.110.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/M

#40 - Bump cloud.google.com/go/bigquery from 1.45.0 to 1.46.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#39 - Bump modernc.org/sqlite from 1.20.3 to 1.20.4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#38 - Exclude repositories from `--fail-on`

Issue - State: open - Opened by ribbybibby over 1 year ago

#37 - Fetch results from the scorecard API

Issue - State: closed - Opened by ribbybibby over 1 year ago - 2 comments

#36 - Insert repositories back into BOM

Issue - State: closed - Opened by ribbybibby over 1 year ago - 1 comment

#35 - Return scorecard results in API result format

Issue - State: closed - Opened by ribbybibby over 1 year ago - 1 comment

#34 - Extract repository information from BOM

Pull Request - State: closed - Opened by ribbybibby over 1 year ago
Labels: size/XXL

#33 - Bump google.golang.org/api from 0.108.0 to 0.109.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#32 - Bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#31 - Bump google.golang.org/api from 0.103.0 to 0.108.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#30 - Bump modernc.org/sqlite from 1.19.5 to 1.20.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/S

#29 - Bump github.com/klauspost/compress from 1.15.12 to 1.15.15

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, size/XS, go

#28 - Bump google.golang.org/api from 0.103.0 to 0.107.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/M

#27 - Bump cloud.google.com/go/bigquery from 1.43.0 to 1.45.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go, size/M

#26 - Bump google.golang.org/api from 0.103.0 to 0.106.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/M

#25 - Bump github.com/klauspost/compress from 1.15.12 to 1.15.14

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, size/XS, go

#24 - Bump modernc.org/sqlite from 1.19.5 to 1.20.2

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/S

#23 - Bump modernc.org/sqlite from 1.19.5 to 1.20.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go, size/S

#22 - Bump google.golang.org/api from 0.103.0 to 0.105.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, go, size/M

#21 - Bump github.com/ossf/scorecard/v4 from 4.8.0 to 4.10.2

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, go, size/M

#20 - Bump goreleaser/goreleaser-action from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions, size/XS

#19 - Bump google.golang.org/api from 0.103.0 to 0.104.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, go, size/M

#18 - Bump github.com/klauspost/compress from 1.15.12 to 1.15.13

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, size/XS, go

#17 - Bump cloud.google.com/go/bigquery from 1.43.0 to 1.44.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, size/XS, go

#16 - Bump modernc.org/sqlite from 1.19.5 to 1.20.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, size/XS, go

#15 - Bump docker/login-action from 1.9.0 to 2.1.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions, size/XS

#14 - Version the database

Issue - State: closed - Opened by ribbybibby almost 2 years ago

#13 - Reduce compressed database size

Issue - State: closed - Opened by ribbybibby almost 2 years ago - 3 comments

#12 - Support SPDX format

Issue - State: open - Opened by ribbybibby almost 2 years ago
Labels: enhancement, good first issue

#11 - Scorecard score for tally

Issue - State: open - Opened by ribbybibby almost 2 years ago
Labels: enhancement, good first issue

#10 - Progress for missing score generation

Issue - State: closed - Opened by ribbybibby almost 2 years ago - 1 comment
Labels: enhancement, good first issue

#9 - Bump google-github-actions/auth from 0.8.3 to 1.0.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions, size/XS

#8 - Store generated scores locally

Issue - State: closed - Opened by ribbybibby almost 2 years ago - 1 comment
Labels: enhancement

#7 - Use dedicated GCP project

Issue - State: closed - Opened by ribbybibby almost 2 years ago - 2 comments
Labels: good first issue

#6 - Insert scores into BOM?

Issue - State: open - Opened by ribbybibby almost 2 years ago
Labels: enhancement

#5 - Infer repositories from SBOM

Issue - State: closed - Opened by ribbybibby about 2 years ago
Labels: enhancement, good first issue

GitHub / jetstack/tally issues and pull requests