Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

🌱 Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 #1192

Merged
merged 3 commits into from
Jun 22, 2023
Merged

🌱 Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 #1192

merged 3 commits into from
Jun 22, 2023

Commits on Jun 22, 2023

  1. Bump scorecard version. 

    Signed-off-by: Spencer Schrock <sschrock@google.com>
    @spencerschrock
    spencerschrock committed Jun 22, 2023
    Configuration menu
    Copy the full SHA
    fe9aa09 View commit details
    Browse the repository at this point in the history

  2. keep go version in sync with go.mod 

    Signed-off-by: Spencer Schrock <sschrock@google.com>
    @spencerschrock
    spencerschrock committed Jun 22, 2023
    Configuration menu
    Copy the full SHA
    a00cdaa View commit details
    Browse the repository at this point in the history

  3. Bump cosign to v2.0.3 psuedo version. 

    This brings it to commit a880f42c4ad5193e8d37471f67639006f4d09ea9.
The goal is to use the same version of github.com/google/go-containerregistry v0.15.2, as MVS is causing breakages.

Signed-off-by: Spencer Schrock <sschrock@google.com>
    @spencerschrock
    spencerschrock committed Jun 22, 2023
    Configuration menu
    Copy the full SHA
    6854278 View commit details
    Browse the repository at this point in the history