Skip to content

Pull requests: ossf/scorecard

New pull request New
57 Open 3,772 Closed
57 Open 3,772 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

🐛 Detect explicit unsafe fork checkouts
#5178 opened Aug 13, 2026 by kyzzniko-lang • Draft
2 tasks done
🐛 stop an unterminated ${{ from aborting the DangerousWorkflow check size:XS This PR changes 0-9 lines, ignoring generated files.
#5177 opened Aug 12, 2026 by Sahana2524 Loading…
2 tasks done
🐛 Use GitLab MR diff head SHA for CI statuses size:XS This PR changes 0-9 lines, ignoring generated files.
#5176 opened Aug 12, 2026 by rylena Loading…
1
🐛 Packaging: recognize erlef/setup-beam for Elixir publishing workflows size:S This PR changes 10-29 lines, ignoring generated files.
#5175 opened Aug 11, 2026 by daniboybye Loading…
fix: improve error messages for branch-protection and pip-install checks size:S This PR changes 10-29 lines, ignoring generated files.
#5174 opened Aug 11, 2026 by rickgcv Loading…
2 tasks
2
🐛 reject oversized zip entries in azuredevopsrepo extractZip size:M This PR changes 30-99 lines, ignoring generated files.
#5173 opened Aug 10, 2026 by Sahana2524 Loading…
2 tasks done
3
🌱 Bump the github-actions group with 5 updates dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code size:XS This PR changes 0-9 lines, ignoring generated files.
#5172 opened Aug 10, 2026 by dependabot Bot Loading…
🌱 Bump chainguard/static from 5e9c881 to 24dd7ff dependencies Pull requests that update a dependency file docker Pull requests that update Docker code size:XS This PR changes 0-9 lines, ignoring generated files.
#5171 opened Aug 10, 2026 by dependabot Bot Loading…
🌱 Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 dependencies Pull requests that update a dependency file go Pull requests that update Go code size:S This PR changes 10-29 lines, ignoring generated files.
#5167 opened Aug 9, 2026 by dependabot Bot Loading…
🌱 Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.2 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:S This PR changes 10-29 lines, ignoring generated files.
#5166 opened Aug 9, 2026 by dependabot Bot Loading…
fix: handle duplicate tarball directories size:S This PR changes 10-29 lines, ignoring generated files.
#5165 opened Aug 8, 2026 by rowkav09 Loading…
1
🐛 contain git-mode file reads within the checkout root size:S This PR changes 10-29 lines, ignoring generated files.
#5164 opened Aug 8, 2026 by Sahana2524 Loading…
2 tasks done
✨ feat: factor private vulnerability reporting into Security-Policy check size:L This PR changes 100-499 lines, ignoring generated files.
#5163 opened Aug 5, 2026 by bilaldeveloper4312 Loading…
1
1
🌱 Bump the gomod group across 2 directories with 23 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code size:XL This PR changes 500-999 lines, ignoring generated files.
#5160 opened Aug 4, 2026 by dependabot Bot Loading…
1
📖 docs: fix broken markdown links and a typo size:XS This PR changes 0-9 lines, ignoring generated files.
#5158 opened Aug 4, 2026 by LD-RW Loading…
2 tasks done
1
🐛 Detect implicit NuGet restores size:L This PR changes 100-499 lines, ignoring generated files.
#5156 opened Aug 3, 2026 by theinfosecguy Loading…
2 tasks done
1
1
feat: add private vulnerability reporting probe to Security-Policy check (fixes #2465) size:L This PR changes 100-499 lines, ignoring generated files.
#5155 opened Aug 2, 2026 by Bimpebabs Loading…
1
1
📖 Clarify shell script pinned dependencies size:XS This PR changes 0-9 lines, ignoring generated files.
#5154 opened Aug 2, 2026 by rylena Loading…
1
1
🐛 normalize extracted file paths to forward slashes size:S This PR changes 10-29 lines, ignoring generated files.
#5153 opened Aug 1, 2026 by pujitha24 Loading…
1
2
🐛 Detect additional untrusted workflow contexts size:S This PR changes 10-29 lines, ignoring generated files.
#5152 opened Aug 1, 2026 by dhrrishitvdeka Loading…
2 tasks done
🌱 Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1 in /tools dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files.
#5151 opened Aug 1, 2026 by dependabot Bot Loading…
🐛 Fall back when check suites are truncated size:S This PR changes 10-29 lines, ignoring generated files.
#5150 opened Jul 30, 2026 by ECD5A Loading…
2 tasks done
1
1
Solution (#3915): Dangerous Workflow: some user input are not being detected as unt size:M This PR changes 30-99 lines, ignoring generated files.
#5147 opened Jul 28, 2026 by TFGSUMIT Loading…
feat: detect cargo-dist in Packaging check size:S This PR changes 10-29 lines, ignoring generated files.
#5146 opened Jul 27, 2026 by SebTardif Loading…
1 task done
1
🐛 Branch-Protection: don't fail the whole check on one bad release branch size:S This PR changes 10-29 lines, ignoring generated files.
#5141 opened Jul 25, 2026 by pujitha24 Loading…
1
2
ProTip! Follow long discussions with comments:>50.