Skip to content

Pull requests: ossf/scorecard

Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort

Pull requests list

🌱 Bump chainguard/static from 5e9c881 to 96d02f4 dependencies Pull requests that update a dependency file docker Pull requests that update Docker code
#5209 opened Aug 31, 2026 by dependabot Bot Loading…
📖 docs: Code-Review scoring is proportional, not leveled; list Phabricator/Piper size:S This PR changes 10-29 lines, ignoring generated files.
#5205 opened Aug 29, 2026 by mapyr Loading…
1 of 2 tasks
🐛 fix: recognize GitHub CLI release workflows size:S This PR changes 10-29 lines, ignoring generated files.
#5204 opened Aug 28, 2026 by bilaldeveloper4312 Loading…
🐛 Include workflow file path in actionlint parse errors size:S This PR changes 10-29 lines, ignoring generated files.
#5203 opened Aug 28, 2026 by Eljees Loading…
🐛 Detect GitHub CLI and Nextcloud release workflows size:S This PR changes 10-29 lines, ignoring generated files.
#5202 opened Aug 27, 2026 by CAOShurong Loading…
🐛 fix: match selected security policies by exact path size:S This PR changes 10-29 lines, ignoring generated files.
#5199 opened Aug 26, 2026 by bilaldeveloper4312 Loading…
🐛 Split ko matcher so either setup-ko spelling is detected size:S This PR changes 10-29 lines, ignoring generated files.
#5195 opened Aug 24, 2026 by rylena Loading…
🐛 Fix probe definition loading for fuzz builds size:XS This PR changes 0-9 lines, ignoring generated files.
#5194 opened Aug 23, 2026 by xingyaner Loading…
🐛 Fall back to REST when GraphQL checkSuites is truncated size:S This PR changes 10-29 lines, ignoring generated files.
#5192 opened Aug 22, 2026 by daichunghy Loading…
2 tasks done
🐛 Recognize GitHub self-repository action references size:S This PR changes 10-29 lines, ignoring generated files.
#5191 opened Aug 21, 2026 by trask Contributor Loading…
🌱 Bump github.com/moby/buildkit from 0.26.3 to 0.31.1 dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files. Stale
#5190 opened Aug 19, 2026 by dependabot Bot Loading…
🐛 don't forward gitlab PRIVATE-TOKEN across cross-host redirects size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5189 opened Aug 19, 2026 by Sahana2524 Contributor Loading…
2 tasks done
✨ Add hasSelfHostedRunners probe size:L This PR changes 100-499 lines, ignoring generated files. Stale
#5187 opened Aug 17, 2026 by ChrisJr404 Loading…
2 tasks done
🌱 Bump software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.2 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:XS This PR changes 0-9 lines, ignoring generated files. Stale
#5186 opened Aug 17, 2026 by dependabot Bot Loading…
🌱 Bump the gomod group across 2 directories with 24 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code size:XL This PR changes 500-999 lines, ignoring generated files.
#5184 opened Aug 17, 2026 by dependabot Bot Loading…
fix(github): don't abort scorecard run on 422 from commit search size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5181 opened Aug 14, 2026 by pujitha24 Contributor Loading…
2 tasks done
🐛 avoid scanning the filesystem root for commit-only OSV lookups size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5180 opened Aug 14, 2026 by pujitha24 Contributor Loading…
2 tasks done
✨ Analyze Makefile recipes for unpinned downloads size:L This PR changes 100-499 lines, ignoring generated files.
#5179 opened Aug 14, 2026 by basriakkaya Loading…
2 tasks done
🐛 stop an unterminated ${{ from aborting the DangerousWorkflow check size:XS This PR changes 0-9 lines, ignoring generated files. Stale
#5177 opened Aug 12, 2026 by Sahana2524 Contributor Loading…
2 tasks done
🐛 Use GitLab MR diff head SHA for CI statuses size:XS This PR changes 0-9 lines, ignoring generated files.
#5176 opened Aug 12, 2026 by rylena Loading…
🐛 Packaging: recognize erlef/setup-beam for Elixir publishing workflows size:S This PR changes 10-29 lines, ignoring generated files. Stale
#5175 opened Aug 11, 2026 by daniboybye Loading…
fix: improve error messages for branch-protection and pip-install checks size:S This PR changes 10-29 lines, ignoring generated files.
#5174 opened Aug 11, 2026 by rickgcv Loading…
2 tasks
2
1
🌱 Bump the github-actions group across 1 directory with 5 updates dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code size:XS This PR changes 0-9 lines, ignoring generated files.
#5172 opened Aug 10, 2026 by dependabot Bot Loading…
🌱 Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 dependencies Pull requests that update a dependency file go Pull requests that update Go code size:S This PR changes 10-29 lines, ignoring generated files.
#5167 opened Aug 9, 2026 by dependabot Bot Loading…
ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.