matrix-art.meta

87.json (12801B)

---

 {
   "number": 87,
   "title": "Bump ossf/scorecard-action from 1.0.1 to 1.0.4",
   "state": "merged",
   "diff_file": "87.diff",
   "author": "dependabot[bot]",
   "created_at": "2022-03-01T02:02:54Z",
   "closed_at": "2022-03-01T02:13:02Z",
   "merged_at": "2022-03-01T02:13:02Z",
   "base_ref": "main",
   "head_ref": "dependabot/github_actions/ossf/scorecard-action-1.0.4",
   "labels": [
     "dependencies",
     "github_actions"
   ],
   "assignees": [
     "MTRNord"
   ],
   "requested_reviewers": [
     "MTRNord"
   ],
   "body": "[//]: # (dependabot-start)\n\u26a0\ufe0f  **Dependabot is rebasing this PR** \u26a0\ufe0f \n\nRebasing might not happen immediately, so don't worry if this takes some time.\n\nNote: if you make any changes to this PR yourself, they will take precedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.1 to 1.0.4.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/ossf/scorecard-action/releases\">ossf/scorecard-action's releases</a>.</em></p>\n<blockquote>\n<h2>v1.0.4</h2>\n<h2>Summary</h2>\n<p>This release fixes <code>null</code> repository and branch issues: see <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/issues/106\">ossf/scorecard-action#106</a>, <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/issues/84\">ossf/scorecard-action#84</a> and <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/issues/73\">ossf/scorecard-action#73</a></p>\n<h2>What's Changed</h2>\n<ul>\n<li>Update codeql-analysis.yml by <a href=\"https://github.com/jauderho\"><code>@\u200bjauderho</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/76\">ossf/scorecard-action#76</a></li>\n<li>use GITHUB_REPOSITORY in shell script by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/83\">ossf/scorecard-action#83</a></li>\n<li>Bump github/codeql-action from 1.0.30 to 1.0.31 by <a href=\"https://github.com/dependabot\"><code>@\u200bdependabot</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/81\">ossf/scorecard-action#81</a></li>\n<li>\u2728 Add warning for empty repo token by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/71\">ossf/scorecard-action#71</a></li>\n<li>\ud83d\udc1b  Fix default parameter requirement by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/89\">ossf/scorecard-action#89</a></li>\n<li>:sparkles:  Initial porting the shellscript to go by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/87\">ossf/scorecard-action#87</a></li>\n<li>:seedling: Golang CI for clean code. by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/90\">ossf/scorecard-action#90</a></li>\n<li>Bump github/codeql-action from 1.0.31 to 1.0.32 by <a href=\"https://github.com/dependabot\"><code>@\u200bdependabot</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/93\">ossf/scorecard-action#93</a></li>\n<li>:seedling: Porting shell script to Go by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/94\">ossf/scorecard-action#94</a></li>\n<li>\ud83c\udf31 More tests by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/95\">ossf/scorecard-action#95</a></li>\n<li>\ud83d\udc1b Fix null is fork in script by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/98\">ossf/scorecard-action#98</a></li>\n<li>:seedling: Porting of shell script to go by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/99\">ossf/scorecard-action#99</a></li>\n<li>Bump github/codeql-action from 1.0.32 to 1.1.0 by <a href=\"https://github.com/dependabot\"><code>@\u200bdependabot</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/102\">ossf/scorecard-action#102</a></li>\n<li>Bump actions/setup-go from 2.1.5 to 2.2.0 by <a href=\"https://github.com/dependabot\"><code>@\u200bdependabot</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/101\">ossf/scorecard-action#101</a></li>\n<li>:seedling: Final bits of porting the shell to go by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/103\">ossf/scorecard-action#103</a></li>\n<li>:seedling: Dependabot for go by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/104\">ossf/scorecard-action#104</a></li>\n<li>:seedling: Verify clean env in build by <a href=\"https://github.com/naveensrinivasan\"><code>@\u200bnaveensrinivasan</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/105\">ossf/scorecard-action#105</a></li>\n</ul>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/dependabot\"><code>@\u200bdependabot</code></a> made their first contribution in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/81\">ossf/scorecard-action#81</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/ossf/scorecard-action/compare/v1.0.3...v1.0.4\">https://github.com/ossf/scorecard-action/compare/v1.0.3...v1.0.4</a></p>\n<h2>v1.0.3</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>Bump hash for v1.0.2 by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/69\">ossf/scorecard-action#69</a></li>\n<li>Missing slash in README.md by <a href=\"https://github.com/ChrisCarini\"><code>@\u200bChrisCarini</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/74\">ossf/scorecard-action#74</a></li>\n<li>\ud83d\udc1b Fix null default branch/private fields by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/75\">ossf/scorecard-action#75</a></li>\n</ul>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/ChrisCarini\"><code>@\u200bChrisCarini</code></a> made their first contribution in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/74\">ossf/scorecard-action#74</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/ossf/scorecard-action/compare/v1.0.2...v1.0.3\">https://github.com/ossf/scorecard-action/compare/v1.0.2...v1.0.3</a></p>\n<h2>v1.0.2</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>Bump the hash in doc by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/62\">ossf/scorecard-action#62</a></li>\n<li>Update README.md by <a href=\"https://github.com/olivekl\"><code>@\u200bolivekl</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/65\">ossf/scorecard-action#65</a></li>\n<li>\ud83d\udcd6 Add doc about SAML SSO by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/67\">ossf/scorecard-action#67</a></li>\n<li>\ud83d\udc1b Support arbitrary default branch by <a href=\"https://github.com/laurentsimon\"><code>@\u200blaurentsimon</code></a> in <a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/pull/68\">ossf/scorecard-action#68</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/ossf/scorecard-action/compare/v1.0.1...v1.0.2\">https://github.com/ossf/scorecard-action/compare/v1.0.1...v1.0.2</a></p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/c1aec4ac820532bab364f02a81873c555a0ba3a1\"><code>c1aec4a</code></a> :seedling: Verify clean env in build</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/750f59811ed40b6bf1a0159499e1add3575c7e96\"><code>750f598</code></a> :seedling: Dependabot for go</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/322c6e0d1177e401527e959d5cda30f7efde79d7\"><code>322c6e0</code></a> :seedling: Final bits of porting the shell to go</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/5b4ee3814a73a7a097c774d33cd465fac32edd4c\"><code>5b4ee38</code></a> Bump actions/setup-go from 2.1.5 to 2.2.0</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/0550e75063519d2cf7bffc8b9c137ec5760422a6\"><code>0550e75</code></a> Bump github/codeql-action from 1.0.32 to 1.1.0</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/9e79f66a0f9c9627716579ac6d76eb80d74e3b52\"><code>9e79f66</code></a> :seedling: Porting of shell script to go</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/60701bb3be469338b1edac53928432566e0f688c\"><code>60701bb</code></a> ./entrypoints.sh: updated SCORECARD_IS_FORK (<a href=\"https://github-redirect.dependabot.com/ossf/scorecard-action/issues/98\">#98</a>)</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/869bc607582d2449c2529ebc09c7f49d30f0efde\"><code>869bc60</code></a> :seedling: More unit tests for porting to Go</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/57f3e8af09538cf1746dcef7fe6b7b29cc9ac428\"><code>57f3e8a</code></a> :seedling: Porting shell script to Go</li>\n<li><a href=\"https://github.com/ossf/scorecard-action/commit/682b53e351b930f033f957e05c77e0352482d9b9\"><code>682b53e</code></a> :seedling: Porting shell script to Go</li>\n<li>Additional commits viewable in <a href=\"https://github.com/ossf/scorecard-action/compare/e3e75cf2ffbf9364bbff86cdbdf52b23176fe492...c1aec4ac820532bab364f02a81873c555a0ba3a1\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ossf/scorecard-action&package-manager=github_actions&previous-version=1.0.1&new-version=1.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>",
   "comments": [],
   "review_comments": []
 }