Skip to content

Pull requests: ossf/scorecard

New pull request New
24 Open 3,440 Closed
24 Open 3,440 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

✨ Initial draft of using Minder rules in Scorecard
#4723 opened Jul 25, 2025 by evankanderson • Draft
1 of 2 tasks
1
🌱 add cases for alerts in dangerous workflow pattern detection
#4722 opened Jul 24, 2025 by AdamKorcz Loading…
2 tasks done
1
🐛 detect blocked user name and email in dangerous workflow
#4720 opened Jul 23, 2025 by AdamKorcz Loading…
2 tasks done
1
🐛 detect discussion title and body in dangerous workflow
#4719 opened Jul 23, 2025 by AdamKorcz Loading…
2 tasks done
1
1
🐛 detect label names in dangerous workflows
#4718 opened Jul 23, 2025 by AdamKorcz Loading…
2 tasks done
1
1
🐛 detect dangerous patterns in toJSON() in dangerous workflows
#4717 opened Jul 23, 2025 by AdamKorcz Loading…
2 tasks done
3
🌱 Add utils for retrieving data about project dependencies
#4711 opened Jul 21, 2025 by AdamKorcz • Draft
2 tasks done
2
🌱 Bump the gomod group across 2 directories with 5 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code
#4710 opened Jul 21, 2025 by dependabot bot Loading…
🌱 Bump the github-actions group with 2 updates dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code
#4709 opened Jul 21, 2025 by dependabot bot Loading…
📖 Rephrased the CI-Test description.
#4708 opened Jul 18, 2025 by kailealee Loading…
1 of 2 tasks
1
5
📖 document missing cron checks in README
#4707 opened Jul 18, 2025 by spencerschrock Loading…
1 of 2 tasks
1
1
🐛 avoid processing nonexistent codeowner files Stale
#4705 opened Jul 17, 2025 by spencerschrock Loading…
1 task done
1
2
🌱 implement GetPackage for depsdev client
#4697 opened Jul 9, 2025 by AdamKorcz Loading…
2 tasks done
2
🌱 add support for hadolint SAST
#4688 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
1
10
🌱 add support for KICS SAST Stale
#4687 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
1
2
🌱 add support for Checkov SAST tool Stale
#4686 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
1
2
🌱 add support for trivy SAST tool Stale
#4685 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
2
🌱 add support for elixir packaging workflow Stale
#4684 opened Jun 28, 2025 by AdamKorcz Loading…
2 tasks done
1
2
🐛 check for npm package git URLs
#4680 opened Jun 27, 2025 by AdamKorcz Loading…
2 tasks done
1
15
✨ feat: Refactor scorecard serve cmd
#4665 opened Jun 17, 2025 by Fix3dP0int Loading…
1 of 2 tasks
23
🌱 cron: repair gitlab project list Stale
#4658 opened Jun 13, 2025 by spencerschrock Loading…
1 of 2 tasks
4
🌱 migrate to golangci-lint v2 Stale
#4641 opened May 29, 2025 by spencerschrock Loading…
1 of 2 tasks
4
🌱 avoid unnecessary []byte to string conversions
#4539 opened Feb 25, 2025 by spencerschrock Loading…
1 of 2 tasks
2
✨ multi-scorecard experiment Stale
#4502 opened Jan 25, 2025 by justaugustus Loading…
1 of 2 tasks
@jeffmendoza
2
ProTip! Filter pull requests by the default branch with base:main.