Ecosyste.ms: Issues
An open API service for providing issue and pull request metadata for open source projects.
GitHub / naveensrinivasan/scorecard issues and pull requests
#480 - :seedling: Bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.5 in /tools
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, go
#479 - :seedling: Bump golang from `ea3d912` to `685a22e` in /clients/githubrepo/roundtripper/tokens/server
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, docker
#478 - :seedling: Bump golang from `25de7b6` to `685a22e` in /cron/internal/cii
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, docker
#477 - :seedling: Bump golang from `25de7b6` to `685a22e` in /cron/internal/controller
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, docker
#476 - :seedling: Bump golang from `25de7b6` to `685a22e` in /cron/internal/webhook
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, docker
#475 - :seedling: Bump golang from `25de7b6` to `685a22e` in /cron/internal/worker
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, docker
#474 - :seedling: Bump golang from `25de7b6` to `685a22e` in /cron/internal/bq
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, docker
#473 - :seedling: Bump tj-actions/changed-files from 35.8.0 to 35.9.2
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, github_actions
#472 - :seedling: Bump golang from `25de7b6` to `685a22e`
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, docker
#471 - :seedling: Bump slsa-framework/slsa-github-generator from 1.2.0 to 1.6.0
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, github_actions
#470 - :seedling: Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /tools
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go
#469 - :seedling: Bump github.com/cloudflare/circl from 1.2.0 to 1.3.3 in /tools
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go
#468 - :seedling: Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, go
#467 - :seedling: Bump github.com/goreleaser/goreleaser from 1.17.0 to 1.18.2 in /tools
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#466 - :seedling: Bump golang from `25de7b6` to `31a8f92` in /cron/internal/worker
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#465 - :seedling: Bump golang from `25de7b6` to `31a8f92` in /cron/internal/webhook
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#464 - :seedling: Bump golang from `25de7b6` to `31a8f92` in /cron/internal/cii
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#463 - :seedling: Bump golang from `25de7b6` to `31a8f92` in /cron/internal/bq
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#462 - :seedling: Bump golang from `25de7b6` to `31a8f92` in /cron/internal/controller
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#461 - :seedling: Bump golang from `ea3d912` to `31a8f92` in /clients/githubrepo/roundtripper/tokens/server
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#460 - :seedling: Bump golang from `25de7b6` to `31a8f92`
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#459 - :seedling: Bump step-security/harden-runner from 2.3.0 to 2.4.0
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions, no-pr-activity
#458 - :seedling: Bump github/codeql-action from 2.2.11 to 2.3.3
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions, no-pr-activity
#457 - :seedling: Bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#456 - :seedling: Bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 in /tools
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, go, no-pr-activity
#455 - :seedling: Bump github/codeql-action from 2.2.11 to 2.3.2
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, github_actions
#454 - :seedling: Bump github/codeql-action from 2.2.11 to 2.3.1
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions
#453 - :seedling: Bump github/codeql-action from 2.2.11 to 2.3.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions
#452 - :seedling: Bump step-security/harden-runner from 2.3.0 to 2.3.1
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, github_actions, no-pr-activity
#451 - :seedling: Bump github.com/goreleaser/goreleaser from 1.17.0 to 1.17.2 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#450 - :seedling: Bump github.com/goreleaser/goreleaser from 1.17.0 to 1.17.1 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go
#449 - :seedling: Bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go
#448 - :seedling: Bump github.com/rhysd/actionlint from 1.6.15 to 1.6.24
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, go
#447 - :seedling: Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go
#446 - :seedling: Bump slsa-framework/slsa-github-generator from 1.4.0 to 1.5.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, github_actions, no-pr-activity
#445 - :seedling: Bump golang from `25de7b6` to `403f486` in /cron/internal/bq
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#444 - :seedling: Bump distroless/base from `99133cb` to `e406b1d` in /cron/internal/bq
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#443 - :seedling: Bump actions/checkout from 3.5.1 to 3.5.2
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions, no-pr-activity
#442 - :seedling: Bump github/codeql-action from 2.2.11 to 2.2.12
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions, no-pr-activity
#441 - :seedling: Bump golang from `25de7b6` to `403f486` in /cron/internal/worker
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#440 - :seedling: Bump distroless/base from `99133cb` to `e406b1d` in /cron/internal/worker
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#439 - :seedling: Bump golang from `25de7b6` to `403f486` in /cron/internal/cii
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#438 - :seedling: Bump distroless/base from `4b22ca3` to `e406b1d` in /clients/githubrepo/roundtripper/tokens/server
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#437 - :seedling: Bump distroless/base from `99133cb` to `e406b1d` in /cron/internal/cii
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#436 - :seedling: Bump golang from `ea3d912` to `403f486` in /clients/githubrepo/roundtripper/tokens/server
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#435 - :seedling: Bump golang from `25de7b6` to `403f486` in /cron/internal/webhook
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, docker, no-pr-activity
#434 - :seedling: Bump golang from `25de7b6` to `403f486`
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#433 - :seedling: Bump distroless/base from `99133cb` to `e406b1d` in /cron/internal/webhook
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#432 - :seedling: Bump distroless/base from `99133cb` to `e406b1d` in /cron/internal/controller
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#431 - :seedling: Bump golang from `25de7b6` to `403f486` in /cron/internal/controller
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, docker, no-pr-activity
#430 - :seedling: Bump golang from `3c4de86` to `b9709ec` in /cron/worker
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#429 - :seedling: Bump golang from `3c4de86` to `b9709ec` in /cron/webhook
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#428 - :seedling: Bump golang from `3c4de86` to `b9709ec` in /cron/controller
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#427 - :seedling: Bump golang from `3c4de86` to `b9709ec`
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#426 - :seedling: Bump golang from `3c4de86` to `b9709ec` in /cron/bq
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker, no-pr-activity
#425 - :seedling: Bump actions/checkout from 3.0.0 to 3.5.1
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions
#424 - :seedling: Bump github.com/goreleaser/goreleaser from 1.6.3 to 1.17.0 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go
#423 - :seedling: Bump golang from `3c4de86` to `23050c2` in /cron/controller
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#422 - :seedling: Bump golang from `3c4de86` to `23050c2`
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#421 - :seedling: Bump golang from `3c4de86` to `23050c2` in /cron/worker
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#420 - :seedling: Bump golang from `3c4de86` to `23050c2` in /cron/bq
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#419 - :seedling: Bump golang from `3c4de86` to `23050c2` in /cron/webhook
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, docker
#418 - :seedling: Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.0.4 to 2.3.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go
#417 - :seedling: Bump goreleaser/goreleaser-action from 2.9.1 to 4.2.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions
#416 - :seedling: Bump golang.org/x/text from 0.3.7 to 0.9.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go
#415 - :seedling: Bump github/codeql-action from 1.0.0 to 2.2.11
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions
#414 - :seedling: Bump github/codeql-action from 1.0.0 to 2.2.10
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions
#413 - :seedling: Bump step-security/harden-runner from 1.4.1 to 2.3.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, github_actions, no-pr-activity
#412 - :seedling: Bump github.com/docker/docker from 20.10.12+incompatible to 20.10.24+incompatible in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#411 - :seedling: Bump github.com/docker/docker from 20.10.12+incompatible to 20.10.24+incompatible
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#410 - :seedling: Bump cloud.google.com/go/bigquery from 1.31.0 to 1.50.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#409 - :seedling: Bump cloud.google.com/go/pubsub from 1.20.0 to 1.30.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#408 - :seedling: Bump actions/checkout from 3.0.0 to 3.5.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, github_actions
#407 - :seedling: Bump google.golang.org/protobuf from 1.28.0 to 1.30.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#406 - :seedling: Bump google.golang.org/protobuf from 1.28.0 to 1.30.0 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#405 - :seedling: Bump github.com/onsi/gomega from 1.19.0 to 1.27.6
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#404 - :seedling: Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.6.1
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#403 - :seedling: Bump github/codeql-action from 1.0.0 to 2.2.9
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, github_actions
#402 - :seedling: Bump github.com/golangci/golangci-lint from 1.45.2 to 1.52.2 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#401 - :seedling: Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.0.4 to 2.2.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#400 - :seedling: Bump github.com/onsi/ginkgo/v2 from 2.1.3 to 2.9.2 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#399 - :seedling: Bump github.com/moby/buildkit from 0.8.3 to 0.11.5
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#398 - :seedling: Bump github.com/onsi/gomega from 1.19.0 to 1.27.5
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 1 comment
Labels: dependencies, go
#397 - :seedling: Bump github.com/onsi/ginkgo/v2 from 2.1.3 to 2.9.2
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#394 - :seedling: Bump github.com/goreleaser/goreleaser from 1.6.3 to 1.16.2 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#392 - :seedling: Bump cloud.google.com/go/bigquery from 1.31.0 to 1.49.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#389 - :seedling: Bump actions/cache from 3.0.2 to 3.3.1
Pull Request -
State: open - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, github_actions, no-pr-activity
#387 - :seedling: Bump github.com/google/ko from 0.10.1-0.20220221173235-a36ea50a9eca to 0.13.0 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#383 - :seedling: Bump step-security/harden-runner from 1.4.1 to 2.2.1
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, github_actions, no-pr-activity
#380 - :seedling: Bump kubernetes-sigs/kubebuilder-release-tools from 0.1.1 to 0.3.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, github_actions, no-pr-activity
#378 - :seedling: Bump golang.org/x/tools from 0.1.10 to 0.7.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#375 - :seedling: Bump github.com/sigstore/cosign from 1.5.2 to 1.12.0 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#374 - :seedling: Bump github.com/theupdateframework/go-tuf from 0.0.0-20220211205608-f0c3294f63b9 to 0.3.2 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#373 - :seedling: Bump golang.org/x/net from 0.0.0-20220127200216-cd36cc0744dd to 0.7.0 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#372 - :seedling: Bump golang.org/x/crypto from 0.0.0-20220214200702-86341886e292 to 0.1.0 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#369 - :seedling: Bump golang.org/x/text from 0.3.7 to 0.8.0
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#363 - :seedling: Bump github.com/jszwec/csvutil from 1.6.0 to 1.8.0
Pull Request -
State: closed - Opened by dependabot[bot] almost 2 years ago
- 2 comments
Labels: dependencies, go, no-pr-activity
#362 - :seedling: Bump peter-evans/find-comment from 2.0.0 to 2.3.0
Pull Request -
State: closed - Opened by dependabot[bot] almost 2 years ago
- 3 comments
Labels: dependencies, github_actions, no-pr-activity
#357 - :seedling: Bump github.com/xeipuuv/gojsonschema from 0.0.0-20180618132009-1d523034197f to 1.2.0
Pull Request -
State: closed - Opened by dependabot[bot] almost 2 years ago
- 3 comments
Labels: dependencies, go, no-pr-activity
#356 - :seedling: Bump golang.org/x/text from 0.3.7 to 0.3.8 in /tools
Pull Request -
State: closed - Opened by dependabot[bot] almost 2 years ago
- 3 comments
Labels: dependencies, go, no-pr-activity