87.md (12231B)
1 # PR #87 Bump ossf/scorecard-action from 1.0.1 to 1.0.4 2 3 - **Status:** merged 4 - **Author:** @dependabot[bot] 5 - **Created:** 2022-03-01T02:02:54Z 6 - **Branch:** dependabot/github_actions/ossf/scorecard-action-1.0.4 → main 7 - **Merged:** 2022-03-01T02:13:02Z 8 - **Labels:** dependencies, github_actions 9 - **Assignees:** @MTRNord 10 - **Reviewers:** @MTRNord 11 - **Diff:** [87.diff](./87.diff) 12 13 --- 14 15 [//]: # (dependabot-start) 16 ⚠️ **Dependabot is rebasing this PR** ⚠️ 17 18 Rebasing might not happen immediately, so don't worry if this takes some time. 19 20 Note: if you make any changes to this PR yourself, they will take precedence over the rebase. 21 22 --- 23 24 [//]: # (dependabot-end) 25 26 Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.1 to 1.0.4. 27 <details> 28 <summary>Release notes</summary> 29 <p><em>Sourced from <a href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's releases</a>.</em></p> 30 <blockquote> 31 <h2>v1.0.4</h2> 32 <h2>Summary</h2> 33 <p>This release fixes <code>null</code> repository and branch issues: see <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/106">ossf/scorecard-action#106</a>, <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/84">ossf/scorecard-action#84</a> and <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/73">ossf/scorecard-action#73</a></p> 34 <h2>What's Changed</h2> 35 <ul> 36 <li>Update codeql-analysis.yml by <a href="https://github.com/jauderho"><code>@jauderho</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/76">ossf/scorecard-action#76</a></li> 37 <li>use GITHUB_REPOSITORY in shell script by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/83">ossf/scorecard-action#83</a></li> 38 <li>Bump github/codeql-action from 1.0.30 to 1.0.31 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/81">ossf/scorecard-action#81</a></li> 39 <li>✨ Add warning for empty repo token by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/71">ossf/scorecard-action#71</a></li> 40 <li>🐛 Fix default parameter requirement by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/89">ossf/scorecard-action#89</a></li> 41 <li>:sparkles: Initial porting the shellscript to go by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/87">ossf/scorecard-action#87</a></li> 42 <li>:seedling: Golang CI for clean code. by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/90">ossf/scorecard-action#90</a></li> 43 <li>Bump github/codeql-action from 1.0.31 to 1.0.32 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/93">ossf/scorecard-action#93</a></li> 44 <li>:seedling: Porting shell script to Go by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/94">ossf/scorecard-action#94</a></li> 45 <li>🌱 More tests by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/95">ossf/scorecard-action#95</a></li> 46 <li>🐛 Fix null is fork in script by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/98">ossf/scorecard-action#98</a></li> 47 <li>:seedling: Porting of shell script to go by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/99">ossf/scorecard-action#99</a></li> 48 <li>Bump github/codeql-action from 1.0.32 to 1.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/102">ossf/scorecard-action#102</a></li> 49 <li>Bump actions/setup-go from 2.1.5 to 2.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/101">ossf/scorecard-action#101</a></li> 50 <li>:seedling: Final bits of porting the shell to go by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/103">ossf/scorecard-action#103</a></li> 51 <li>:seedling: Dependabot for go by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/104">ossf/scorecard-action#104</a></li> 52 <li>:seedling: Verify clean env in build by <a href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/105">ossf/scorecard-action#105</a></li> 53 </ul> 54 <h2>New Contributors</h2> 55 <ul> 56 <li><a href="https://github.com/dependabot"><code>@dependabot</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/81">ossf/scorecard-action#81</a></li> 57 </ul> 58 <p><strong>Full Changelog</strong>: <a href="https://github.com/ossf/scorecard-action/compare/v1.0.3...v1.0.4">https://github.com/ossf/scorecard-action/compare/v1.0.3...v1.0.4</a></p> 59 <h2>v1.0.3</h2> 60 <h2>What's Changed</h2> 61 <ul> 62 <li>Bump hash for v1.0.2 by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/69">ossf/scorecard-action#69</a></li> 63 <li>Missing slash in README.md by <a href="https://github.com/ChrisCarini"><code>@ChrisCarini</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/74">ossf/scorecard-action#74</a></li> 64 <li>🐛 Fix null default branch/private fields by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/75">ossf/scorecard-action#75</a></li> 65 </ul> 66 <h2>New Contributors</h2> 67 <ul> 68 <li><a href="https://github.com/ChrisCarini"><code>@ChrisCarini</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/74">ossf/scorecard-action#74</a></li> 69 </ul> 70 <p><strong>Full Changelog</strong>: <a href="https://github.com/ossf/scorecard-action/compare/v1.0.2...v1.0.3">https://github.com/ossf/scorecard-action/compare/v1.0.2...v1.0.3</a></p> 71 <h2>v1.0.2</h2> 72 <h2>What's Changed</h2> 73 <ul> 74 <li>Bump the hash in doc by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/62">ossf/scorecard-action#62</a></li> 75 <li>Update README.md by <a href="https://github.com/olivekl"><code>@olivekl</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/65">ossf/scorecard-action#65</a></li> 76 <li>📖 Add doc about SAML SSO by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/67">ossf/scorecard-action#67</a></li> 77 <li>🐛 Support arbitrary default branch by <a href="https://github.com/laurentsimon"><code>@laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/68">ossf/scorecard-action#68</a></li> 78 </ul> 79 <p><strong>Full Changelog</strong>: <a href="https://github.com/ossf/scorecard-action/compare/v1.0.1...v1.0.2">https://github.com/ossf/scorecard-action/compare/v1.0.1...v1.0.2</a></p> 80 </blockquote> 81 </details> 82 <details> 83 <summary>Commits</summary> 84 <ul> 85 <li><a href="https://github.com/ossf/scorecard-action/commit/c1aec4ac820532bab364f02a81873c555a0ba3a1"><code>c1aec4a</code></a> :seedling: Verify clean env in build</li> 86 <li><a href="https://github.com/ossf/scorecard-action/commit/750f59811ed40b6bf1a0159499e1add3575c7e96"><code>750f598</code></a> :seedling: Dependabot for go</li> 87 <li><a href="https://github.com/ossf/scorecard-action/commit/322c6e0d1177e401527e959d5cda30f7efde79d7"><code>322c6e0</code></a> :seedling: Final bits of porting the shell to go</li> 88 <li><a href="https://github.com/ossf/scorecard-action/commit/5b4ee3814a73a7a097c774d33cd465fac32edd4c"><code>5b4ee38</code></a> Bump actions/setup-go from 2.1.5 to 2.2.0</li> 89 <li><a href="https://github.com/ossf/scorecard-action/commit/0550e75063519d2cf7bffc8b9c137ec5760422a6"><code>0550e75</code></a> Bump github/codeql-action from 1.0.32 to 1.1.0</li> 90 <li><a href="https://github.com/ossf/scorecard-action/commit/9e79f66a0f9c9627716579ac6d76eb80d74e3b52"><code>9e79f66</code></a> :seedling: Porting of shell script to go</li> 91 <li><a href="https://github.com/ossf/scorecard-action/commit/60701bb3be469338b1edac53928432566e0f688c"><code>60701bb</code></a> ./entrypoints.sh: updated SCORECARD_IS_FORK (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/98">#98</a>)</li> 92 <li><a href="https://github.com/ossf/scorecard-action/commit/869bc607582d2449c2529ebc09c7f49d30f0efde"><code>869bc60</code></a> :seedling: More unit tests for porting to Go</li> 93 <li><a href="https://github.com/ossf/scorecard-action/commit/57f3e8af09538cf1746dcef7fe6b7b29cc9ac428"><code>57f3e8a</code></a> :seedling: Porting shell script to Go</li> 94 <li><a href="https://github.com/ossf/scorecard-action/commit/682b53e351b930f033f957e05c77e0352482d9b9"><code>682b53e</code></a> :seedling: Porting shell script to Go</li> 95 <li>Additional commits viewable in <a href="https://github.com/ossf/scorecard-action/compare/e3e75cf2ffbf9364bbff86cdbdf52b23176fe492...c1aec4ac820532bab364f02a81873c555a0ba3a1">compare view</a></li> 96 </ul> 97 </details> 98 <br /> 99 100 101 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 102 103 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 104 105 [//]: # (dependabot-automerge-start) 106 [//]: # (dependabot-automerge-end) 107 108 --- 109 110 <details> 111 <summary>Dependabot commands and options</summary> 112 <br /> 113 114 You can trigger Dependabot actions by commenting on this PR: 115 - `@dependabot rebase` will rebase this PR 116 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 117 - `@dependabot merge` will merge this PR after your CI passes on it 118 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 119 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 120 - `@dependabot reopen` will reopen this PR if it is closed 121 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 122 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 123 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 124 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 125 126 127 </details> 128