Skip to content

Actions: Randomname653/Curatarr

Actions

Scorecard supply-chain security

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
scorecard.yml
22 workflow runs
22 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Dependencies keep up with the pins: launchers install, the server rep… Scorecard supply-chain security #22: Commit 1edd176 pushed by Randomname653
37s main
main
37s
LLM sweep: scope, a memory, and a severity floor Scorecard supply-chain security #21: Commit 1dc1205 pushed by Randomname653
36s main
main
36s
Changelog: the three Dependabot bumps Scorecard supply-chain security #20: Commit c684a21 pushed by Randomname653
27s main
main
27s
Bandit #52: the nosec marker was prompt text Scorecard supply-chain security #19: Commit f803dd3 pushed by Randomname653
36s main
main
36s
CodeQL #53: the .env writer is owner-only from the first byte Scorecard supply-chain security #18: Commit 184abea pushed by Randomname653
31s main
main
31s
Docs: where things live after the UI grammar Scorecard supply-chain security #17: Commit bca8042 pushed by Randomname653
27s main
main
27s
Enrichment healing, docs: the curator knows the KB states, ARCHITECTU… Scorecard supply-chain security #16: Commit 448e62f pushed by Randomname653
39s main
main
39s
Setup coverage, frontend half: pitcher in the wizard, Settings -> Int… Scorecard supply-chain security #15: Commit 841439a pushed by Randomname653
28s main
main
28s
Setup coverage, backend half: pitcher on first run, reconfigure after it Scorecard supply-chain security #14: Commit c0af9b0 pushed by Randomname653
36s main
main
36s
Glance tile: library-enriched share, not watched-titles share Scorecard supply-chain security #13: Commit d07a9e5 pushed by Randomname653
40s main
main
40s
Frontend: a literal newline inside a JS string broke the whole app Scorecard supply-chain security #12: Commit 5c554ad pushed by Randomname653
36s main
main
36s
v1.0.1-beta: version bump + the security-pass changelog section Scorecard supply-chain security #11: Commit c4405fb pushed by Randomname653
30s main
main
30s
Blank URL values in .env no longer brick startup Scorecard supply-chain security #10: Commit 46233d3 pushed by Randomname653
31s main
main
31s
An empty JWT secret now refuses to sign - and says why Scorecard supply-chain security #9: Commit c91a88e pushed by Randomname653
32s main
main
32s
OpenSSF Best Practices badge joins Scorecard in the header Scorecard supply-chain security #8: Commit ba777cd pushed by Randomname653
43s main
main
43s
Scorecard supply-chain security Scorecard supply-chain security #7: Scheduled
33s main
main
33s
PyJWT replaces python-jose; Bandit false positives justified in code Scorecard supply-chain security #6: Commit 0da51ad pushed by Randomname653
37s main
main
37s
Process-monitor polls memoized 10s, invalidated on classify; bot roun… Scorecard supply-chain security #5: Commit 68dc221 pushed by Randomname653
28s main
main
28s
Scanner-alert sweep: 20 of 38 fixed in code, the rest documented Scorecard supply-chain security #4: Commit 55ccd07 pushed by Randomname653
35s main
main
35s
CHANGELOG: the v1.0.0-beta section Scorecard supply-chain security #3: Commit 315bc51 pushed by Randomname653
37s main
main
37s
OpenSSF Scorecard badge joins the header Scorecard supply-chain security #2: Commit 197f853 pushed by Randomname653
37s main
main
37s
OSSF Scorecard: a standing auditor for the repo's own hygiene Scorecard supply-chain security #1: Commit 9567da7 pushed by Randomname653
43s main
main
43s