Skip to content

Actions: microsoft/component-detection

Actions

Scorecard supply-chain security

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
ossf-scorecard.yml
331 workflow runs
331 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Fix VcpkgComponent purl construction for names containing slashes (#1… Scorecard supply-chain security #865: Commit 8f1a8b6 pushed by JamieMagee
2m 0s main
main
2m 0s
Reapply "Update packageurl-dotnet to 2.0.0-rc.2 (#1730)" (#1751) (#1753) Scorecard supply-chain security #864: Commit 7fb976c pushed by JamieMagee
4m 17s main
main
4m 17s
Revert "Update packageurl-dotnet to 2.0.0-rc.2 (#1730)" (#1751) Scorecard supply-chain security #863: Commit a01a1ce pushed by zhenghao104
57s main
main
57s
Fix Docker scan timeout cancellation not working (#1729) Scorecard supply-chain security #862: Commit 562d86b pushed by AMaini503
59s main
main
59s
Scorecard supply-chain security Scorecard supply-chain security #861: Scheduled
1m 12s main
main
1m 12s
Bump packageurl-dotnet from 2.0.0-rc.2 to 2.0.0-rc.3 (#1737) Scorecard supply-chain security #860: Commit cd64b9b pushed by JamieMagee
51s main
main
51s
Scorecard supply-chain security Scorecard supply-chain security #859: by grvillic
1m 16s main
main
1m 16s
More maven parsing fix for experiment detector (#1724) Scorecard supply-chain security #858: Commit 62ce022 pushed by zhenghao104
1m 17s main
main
1m 17s
Bump werkzeug (#1682) Scorecard supply-chain security #857: Commit 36fca68 pushed by FernandoRojo
1m 9s main
main
1m 9s
Bump release-drafter/release-drafter from 6.4.0 to 7.0.0 (#1720) Scorecard supply-chain security #856: Commit e5ea991 pushed by FernandoRojo
1m 5s main
main
1m 5s
Bump step-security/harden-runner from 2.15.1 to 2.16.0 (#1725) Scorecard supply-chain security #855: Commit 399a4e3 pushed by FernandoRojo
59s main
main
59s
Bump shogo82148/actions-upload-release-asset from 1.9.2 to 1.10.0 (#1… Scorecard supply-chain security #854: Commit 16644b5 pushed by FernandoRojo
1m 3s main
main
1m 3s
Bump github/codeql-action from 4.32.6 to 4.33.0 (#1727) Scorecard supply-chain security #853: Commit ce65ad3 pushed by FernandoRojo
1m 16s main
main
1m 16s
Bump mshick/add-pr-comment from 2.8.2 to 3.9.0 (#1728) Scorecard supply-chain security #852: Commit 9fd8ea8 pushed by FernandoRojo
51s main
main
51s
Allow prerelease dependency in Contracts NuGet package (#1731) Scorecard supply-chain security #851: Commit 7b302d5 pushed by JamieMagee
3m 35s main
main
3m 35s
Update packageurl-dotnet to 2.0.0-rc.2 (#1730) Scorecard supply-chain security #850: Commit aa548cd pushed by JamieMagee
24m 3s main
main
24m 3s
Scorecard supply-chain security Scorecard supply-chain security #849: Scheduled
1m 11s main
main
1m 11s
[WIP] Fix NPM detector to differentiate packages by namespace (#1713) Scorecard supply-chain security #848: Commit 4e30e9e pushed by nickmarston
1m 32s main
main
1m 32s
Fix maven detector race conditions (#1719) Scorecard supply-chain security #847: Commit 31c5047 pushed by zhenghao104
1m 4s main
main
1m 4s
Revert "Add OCI image support to Linux scanner (#1708)" (#1716) Scorecard supply-chain security #846: Commit db58407 pushed by jasonpaulos
56s main
main
56s
Revert "Add Docker archive support to Linux scanner (#1711)" (#1715) Scorecard supply-chain security #845: Commit 69a2057 pushed by jasonpaulos
1m 14s main
main
1m 14s
Scorecard supply-chain security Scorecard supply-chain security #844: Scheduled
51s main
main
51s
Add Docker archive support to Linux scanner (#1711) Scorecard supply-chain security #843: Commit d6c5db9 pushed by jasonpaulos
58s main
main
58s
Bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 (#1706) Scorecard supply-chain security #842: Commit e0ed239 pushed by JamieMagee
1m 15s main
main
1m 15s
Add OCI image support to Linux scanner (#1708) Scorecard supply-chain security #841: Commit 619040b pushed by jasonpaulos
1m 8s main
main
1m 8s