{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":302670797,"defaultBranch":"main","name":"scorecard","ownerLogin":"ossf","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2020-10-09T14:48:27.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/67707773?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1726511506.0","currentOid":""},"activityList":{"items":[{"before":"c6ad10852a46f669c3eb045a211af17e53f526c1","after":null,"ref":"refs/heads/dependabot/go_modules/github.com/xanzy/go-gitlab-0.109.0","pushedAt":"2024-09-16T18:31:46.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"raghavkaul","name":"Raghav Kaul","path":"/raghavkaul","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8695110?s=80&v=4"}},{"before":"9ff40de429d0c7710076070387c8755494a9f187","after":"5d7dd8fe048688caf7b469f5e4809fe66527b5fc","ref":"refs/heads/main","pushedAt":"2024-09-16T18:31:44.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"raghavkaul","name":"Raghav Kaul","path":"/raghavkaul","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8695110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.109.0 (#4341)\n\nBumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.107.0 to 0.109.0.\r\n- [Release notes](https://github.com/xanzy/go-gitlab/releases)\r\n- [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go)\r\n- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.109.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: github.com/xanzy/go-gitlab\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.109.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2513307598\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4341\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4341/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4341\">#4341</a>)"}},{"before":"52a8e0de206cf0a249d9997db12e5835ed526bb0","after":null,"ref":"refs/heads/dependabot/docker/golang-9658b3ddff","pushedAt":"2024-09-16T17:17:52.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"52a8e0de206cf0a249d9997db12e5835ed526bb0","ref":"refs/heads/dependabot/docker/golang-9658b3ddff","pushedAt":"2024-09-16T09:01:34.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the golang group across 8 directories with 1 update\n\nBumps the golang group with 1 update in the / directory: golang.\nBumps the golang group with 1 update in the /attestor directory: golang.\nBumps the golang group with 1 update in the /clients/githubrepo/roundtripper/tokens/server directory: golang.\nBumps the golang group with 1 update in the /cron/internal/bq directory: golang.\nBumps the golang group with 1 update in the /cron/internal/cii directory: golang.\nBumps the golang group with 1 update in the /cron/internal/controller directory: golang.\nBumps the golang group with 1 update in the /cron/internal/webhook directory: golang.\nBumps the golang group with 1 update in the /cron/internal/worker directory: golang.\n\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\nUpdates `golang` from `4a3c2bc` to `2fe82a3`\n\n---\nupdated-dependencies:\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the golang group across 8 directories with 1 update"}},{"before":"cf577a2ee1986af3e1307c5b493d65bf23fc8fa2","after":"7d4ea402672195c3f177ab0ce51f140191225c69","ref":"refs/heads/dependabot/docker/clients/githubrepo/roundtripper/tokens/server/distroless-8e28c70efd","pushedAt":"2024-09-16T09:01:16.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the distroless group across 6 directories with 1 update\n\nBumps the distroless group with 1 update in the /clients/githubrepo/roundtripper/tokens/server directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/bq directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/cii directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/controller directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/webhook directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/worker directory: distroless/base.\n\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\n---\nupdated-dependencies:\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the distroless group across 6 directories with 1 update"}},{"before":null,"after":"65d2ff66ee5d9008722ab6d98d7245a2a44621f3","ref":"refs/heads/dependabot/github_actions/github-actions-ff7ff010fc","pushedAt":"2024-09-16T08:05:17.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the github-actions group with 2 updates\n\nBumps the github-actions group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [github/codeql-action](https://github.com/github/codeql-action).\n\n\nUpdates `step-security/harden-runner` from 2.9.1 to 2.10.1\n- [Release notes](https://github.com/step-security/harden-runner/releases)\n- [Commits](https://github.com/step-security/harden-runner/compare/5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde...91182cccc01eb5e619899d80e4e971d6181294a7)\n\nUpdates `github/codeql-action` from 3.26.6 to 3.26.7\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/4dd16135b69a43b6c8efb853346f8437d92d3c93...8214744c546c1e5c8f03dde8fab3a7353211988d)\n\n---\nupdated-dependencies:\n- dependency-name: step-security/harden-runner\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n- dependency-name: github/codeql-action\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the github-actions group with 2 updates"}},{"before":"8a4624ec54bba4271a6f6ae210ac0151b16f54f5","after":"597f8219f4d361c78a7c64ea32b272749c335e53","ref":"refs/heads/dependabot/go_modules/golang.org/x/oauth2-0.23.0","pushedAt":"2024-09-13T08:18:32.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump golang.org/x/oauth2 from 0.22.0 to 0.23.0\n\nBumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.22.0 to 0.23.0.\n- [Commits](https://github.com/golang/oauth2/compare/v0.22.0...v0.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/oauth2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump golang.org/x/oauth2 from 0.22.0 to 0.23.0"}},{"before":"07127f3d034a1303d07cd2324bed3df3daacb614","after":"c6ad10852a46f669c3eb045a211af17e53f526c1","ref":"refs/heads/dependabot/go_modules/github.com/xanzy/go-gitlab-0.109.0","pushedAt":"2024-09-13T08:18:31.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.109.0\n\nBumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.107.0 to 0.109.0.\n- [Release notes](https://github.com/xanzy/go-gitlab/releases)\n- [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go)\n- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.109.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/xanzy/go-gitlab\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.109.0"}},{"before":"5b4db0055467ae3cc82d28437fbe013cacb9735b","after":"7572c09459171219ec40f3f9b6de7c01da0b6043","ref":"refs/heads/dependabot/go_modules/github.com/onsi/gomega-1.34.2","pushedAt":"2024-09-13T08:18:26.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/gomega from 1.34.1 to 1.34.2\n\nBumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.1 to 1.34.2.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.34.1...v1.34.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/onsi/gomega\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/onsi/gomega from 1.34.1 to 1.34.2"}},{"before":"6d9b2e4f78f7389961cb2e80851b4e901cf635bc","after":"9ff40de429d0c7710076070387c8755494a9f187","ref":"refs/heads/main","pushedAt":"2024-09-12T06:29:20.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":ghost: git ignore vendor folder (#4335)\n\n* git ignore vendor folder\r\n\r\nSigned-off-by: 6543 <6543@obermui.de>\r\n\r\n* Update .gitignore\r\n\r\nSigned-off-by: 6543 <6543@obermui.de>\r\n\r\n---------\r\n\r\nSigned-off-by: 6543 <6543@obermui.de>","shortMessageHtmlLink":"👻 git ignore vendor folder (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2506336776\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4335\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4335/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4335\">#4335</a>)"}},{"before":null,"after":"8a4624ec54bba4271a6f6ae210ac0151b16f54f5","ref":"refs/heads/dependabot/go_modules/golang.org/x/oauth2-0.23.0","pushedAt":"2024-09-11T08:40:13.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump golang.org/x/oauth2 from 0.22.0 to 0.23.0\n\nBumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.22.0 to 0.23.0.\n- [Commits](https://github.com/golang/oauth2/compare/v0.22.0...v0.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/oauth2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump golang.org/x/oauth2 from 0.22.0 to 0.23.0"}},{"before":"d6fd9170e0b48952d19a67f9259bbea7857b9909","after":"6d9b2e4f78f7389961cb2e80851b4e901cf635bc","ref":"refs/heads/main","pushedAt":"2024-09-11T07:55:02.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":"✨ Add woodpecker as known CI (#4336)\n\n* Add woodpecker as known CI\r\n\r\nSigned-off-by: 6543 <6543@obermui.de>\r\n\r\n* Update probes/testsRunInCI/impl.go\r\n\r\nSigned-off-by: 6543 <6543@obermui.de>\r\n\r\n---------\r\n\r\nSigned-off-by: 6543 <6543@obermui.de>","shortMessageHtmlLink":"✨ Add woodpecker as known CI (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2506370097\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4336\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4336/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4336\">#4336</a>)"}},{"before":"58670e994c21110e2ca1f401fdb1d11be017faf4","after":null,"ref":"refs/heads/dependabot/go_modules/github.com/moby/buildkit-0.16.0","pushedAt":"2024-09-10T21:01:42.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"93bef7b147f9648072118cdefcf4942d5ff61c26","after":"d6fd9170e0b48952d19a67f9259bbea7857b9909","ref":"refs/heads/main","pushedAt":"2024-09-10T21:01:41.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/moby/buildkit from 0.15.1 to 0.16.0 (#4344)","shortMessageHtmlLink":"🌱 Bump github.com/moby/buildkit from 0.15.1 to 0.16.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2517782949\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4344\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4344/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4344\">#4344</a>)"}},{"before":"aa0071bc09274b739ef89e6ca627d6f917c97984","after":null,"ref":"refs/heads/dependabot/go_modules/github.com/moby/buildkit-0.15.2","pushedAt":"2024-09-10T20:53:05.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"58670e994c21110e2ca1f401fdb1d11be017faf4","ref":"refs/heads/dependabot/go_modules/github.com/moby/buildkit-0.16.0","pushedAt":"2024-09-10T20:53:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/moby/buildkit from 0.15.1 to 0.16.0\n\nBumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.15.1 to 0.16.0.\n- [Release notes](https://github.com/moby/buildkit/releases)\n- [Commits](https://github.com/moby/buildkit/compare/v0.15.1...v0.16.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/moby/buildkit\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/moby/buildkit from 0.15.1 to 0.16.0"}},{"before":"ff31745adb04feb9d39e1edb3946634700c9800e","after":null,"ref":"refs/heads/dependabot/docker/golang-9658b3ddff","pushedAt":"2024-09-10T20:37:53.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"4e9b1a012fe7bf3a863c71919621dc5f379bf71a","after":"93bef7b147f9648072118cdefcf4942d5ff61c26","ref":"refs/heads/main","pushedAt":"2024-09-10T20:37:52.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the golang group across 8 directories with 1 update (#4342)","shortMessageHtmlLink":"🌱 Bump the golang group across 8 directories with 1 update (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2513327512\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4342\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4342/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4342\">#4342</a>)"}},{"before":"e3ab3e6f7979f00c475b358609c477a2fe64abba","after":"ff31745adb04feb9d39e1edb3946634700c9800e","ref":"refs/heads/dependabot/docker/golang-9658b3ddff","pushedAt":"2024-09-10T20:29:00.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the golang group across 8 directories with 1 update\n\nBumps the golang group with 1 update in the / directory: golang.\nBumps the golang group with 1 update in the /attestor directory: golang.\nBumps the golang group with 1 update in the /clients/githubrepo/roundtripper/tokens/server directory: golang.\nBumps the golang group with 1 update in the /cron/internal/bq directory: golang.\nBumps the golang group with 1 update in the /cron/internal/cii directory: golang.\nBumps the golang group with 1 update in the /cron/internal/controller directory: golang.\nBumps the golang group with 1 update in the /cron/internal/webhook directory: golang.\nBumps the golang group with 1 update in the /cron/internal/worker directory: golang.\n\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\n---\nupdated-dependencies:\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the golang group across 8 directories with 1 update"}},{"before":"c9a09a14c4df73ab775662bea34beb3aa027e813","after":"4e9b1a012fe7bf3a863c71919621dc5f379bf71a","ref":"refs/heads/main","pushedAt":"2024-09-10T20:07:44.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":"✨ Update SPDX license list, source for license data (#4323)\n\n* Update SPDX license list, source for license data\r\n\r\nSigned-off-by: lelia <le1ia@me.com>\r\n\r\n* Fix typo found by golangci-lint\r\n\r\nSigned-off-by: lelia <le1ia@me.com>\r\n\r\n* Fix alphabetization to conform with existing sort logic\r\n\r\nSigned-off-by: lelia <le1ia@me.com>\r\n\r\n* Reintroduce comment for using curl cmd\r\n\r\nSigned-off-by: lelia <le1ia@me.com>\r\n\r\n---------\r\n\r\nSigned-off-by: lelia <le1ia@me.com>","shortMessageHtmlLink":"✨ Update SPDX license list, source for license data (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2495886386\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4323\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4323/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4323\">#4323</a>)"}},{"before":null,"after":"cf577a2ee1986af3e1307c5b493d65bf23fc8fa2","ref":"refs/heads/dependabot/docker/clients/githubrepo/roundtripper/tokens/server/distroless-8e28c70efd","pushedAt":"2024-09-09T08:47:38.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the distroless group across 6 directories with 1 update\n\nBumps the distroless group with 1 update in the /clients/githubrepo/roundtripper/tokens/server directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/bq directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/cii directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/controller directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/webhook directory: distroless/base.\nBumps the distroless group with 1 update in the /cron/internal/worker directory: distroless/base.\n\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\nUpdates `distroless/base` from `a9899cc` to `604b1b0`\n\n---\nupdated-dependencies:\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n- dependency-name: distroless/base\n  dependency-type: direct:production\n  dependency-group: distroless\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the distroless group across 6 directories with 1 update"}},{"before":null,"after":"e3ab3e6f7979f00c475b358609c477a2fe64abba","ref":"refs/heads/dependabot/docker/golang-9658b3ddff","pushedAt":"2024-09-09T08:47:35.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the golang group across 8 directories with 1 update\n\nBumps the golang group with 1 update in the / directory: golang.\nBumps the golang group with 1 update in the /attestor directory: golang.\nBumps the golang group with 1 update in the /clients/githubrepo/roundtripper/tokens/server directory: golang.\nBumps the golang group with 1 update in the /cron/internal/bq directory: golang.\nBumps the golang group with 1 update in the /cron/internal/cii directory: golang.\nBumps the golang group with 1 update in the /cron/internal/controller directory: golang.\nBumps the golang group with 1 update in the /cron/internal/webhook directory: golang.\nBumps the golang group with 1 update in the /cron/internal/worker directory: golang.\n\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\nUpdates `golang` from 1.23.0 to 1.23.1\n\n---\nupdated-dependencies:\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the golang group across 8 directories with 1 update"}},{"before":"6a6c2587ba3a8b4d7fc69740177e67939f9a3c87","after":null,"ref":"refs/heads/dependabot/go_modules/github.com/xanzy/go-gitlab-0.108.0","pushedAt":"2024-09-09T08:39:49.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"07127f3d034a1303d07cd2324bed3df3daacb614","ref":"refs/heads/dependabot/go_modules/github.com/xanzy/go-gitlab-0.109.0","pushedAt":"2024-09-09T08:39:45.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.109.0\n\nBumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.107.0 to 0.109.0.\n- [Release notes](https://github.com/xanzy/go-gitlab/releases)\n- [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go)\n- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.109.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/xanzy/go-gitlab\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.109.0"}},{"before":null,"after":"5b4db0055467ae3cc82d28437fbe013cacb9735b","ref":"refs/heads/dependabot/go_modules/github.com/onsi/gomega-1.34.2","pushedAt":"2024-09-04T08:25:22.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/gomega from 1.34.1 to 1.34.2\n\nBumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.1 to 1.34.2.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.34.1...v1.34.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/onsi/gomega\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/onsi/gomega from 1.34.1 to 1.34.2"}},{"before":null,"after":"6a6c2587ba3a8b4d7fc69740177e67939f9a3c87","ref":"refs/heads/dependabot/go_modules/github.com/xanzy/go-gitlab-0.108.0","pushedAt":"2024-09-04T08:25:15.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.108.0\n\nBumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.107.0 to 0.108.0.\n- [Release notes](https://github.com/xanzy/go-gitlab/releases)\n- [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go)\n- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.108.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/xanzy/go-gitlab\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.108.0"}},{"before":null,"after":"aa0071bc09274b739ef89e6ca627d6f917c97984","ref":"refs/heads/dependabot/go_modules/github.com/moby/buildkit-0.15.2","pushedAt":"2024-09-04T08:25:08.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/moby/buildkit from 0.15.1 to 0.15.2\n\nBumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.15.1 to 0.15.2.\n- [Release notes](https://github.com/moby/buildkit/releases)\n- [Commits](https://github.com/moby/buildkit/compare/v0.15.1...v0.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/moby/buildkit\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/moby/buildkit from 0.15.1 to 0.15.2"}},{"before":"859b6e9ad2f79c08f953817cc5b48074ed77fb88","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-8a3b30e1aa","pushedAt":"2024-09-03T18:25:10.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"07a436f772f5faf2b445d9b88f23b8ca1ea1e83a","after":"c9a09a14c4df73ab775662bea34beb3aa027e813","ref":"refs/heads/main","pushedAt":"2024-09-03T18:25:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump actions/upload-artifact in the github-actions group (#4328)","shortMessageHtmlLink":"🌱 Bump actions/upload-artifact in the github-actions group (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2500337791\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4328\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4328/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4328\">#4328</a>)"}},{"before":"eb0021092cd9fe1a3ba12ffbaa1b9a65ca000466","after":"859b6e9ad2f79c08f953817cc5b48074ed77fb88","ref":"refs/heads/dependabot/github_actions/github-actions-8a3b30e1aa","pushedAt":"2024-09-03T18:17:31.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump actions/upload-artifact in the github-actions group\n\nBumps the github-actions group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).\n\n\nUpdates `actions/upload-artifact` from 4.3.6 to 4.4.0\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump actions/upload-artifact in the github-actions group"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xNlQxODozMTo0Ni4wMDAwMDBazwAAAAS3wqEj","startCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xNlQxODozMTo0Ni4wMDAwMDBazwAAAAS3wqEj","endCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0wM1QxODoxNzozMS4wMDAwMDBazwAAAASr5T-z"}},"title":"Activity · ossf/scorecard"}