dependabot[bot]
5678c9ae55
Bump actions/dependency-review-action from 4.4.0 to 4.5.0
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](4081bf99e2...3b139cfc5f
2024-11-21 00:44:47 +00:00
dependabot[bot]
1b69a59cfc
Bump step-security/harden-runner from 2.10.1 to 2.10.2
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.10.1 to 2.10.2.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](91182cccc0...0080882f6c
2024-11-19 01:10:13 +00:00
dependabot[bot]
211421aa0e
Bump actions/dependency-review-action from 4.3.5 to 4.4.0
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.3.5 to 4.4.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](a6993e2c61...4081bf99e2
2024-10-29 00:39:38 +00:00
dependabot[bot]
3aa951c317
Bump actions/dependency-review-action from 4.3.4 to 4.3.5
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.3.4 to 4.3.5.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](5a2ce3f5b9...a6993e2c61
2024-10-22 00:56:03 +00:00
dependabot[bot]
40f53eb9b9
Bump step-security/harden-runner from 2.9.1 to 2.10.1
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.9.1 to 2.10.1.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/v2.9.1...91182cccc01eb5e619899d80e4e971d6181294a7 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-13 18:29:05 +00:00
10d77340d5
Add security workflows for code analysis
...
This commit introduces three GitHub Actions workflows: `govulncheck`, `dependency-review`, and `scorecards`. These workflows enhance security by scanning for vulnerabilities, reviewing dependencies, and analyzing the supply-chain, respectively.
2024-09-11 10:58:53 +02:00
