ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-09-19 13:07:17 +03:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
1829ee7600
scorecard/go.mod

38 lines
1.3 KiB
Modula-2
Raw Normal View History

Rename repo/modules.
2020-10-27 22:23:48 +03:00
module github.com/ossf/scorecard
Initial commit.
2020-10-09 17:47:59 +03:00
feat - migrate to go 1.16 (#233) Upgrade to go version 1.16
2021-03-03 21:56:29 +03:00
go 1.16
Initial commit.
2020-10-09 17:47:59 +03:00
require (
:seedling: Bump cloud.google.com/go/bigquery from 1.8.0 to 1.18.0 (#483) Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.8.0 to 1.18.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.8.0...spanner/v1.18.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-26 22:58:21 +03:00
cloud.google.com/go/bigquery v1.18.0
:seedling: Bump cloud.google.com/go/pubsub from 1.10.3 to 1.11.0 Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.10.3 to 1.11.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.10.3...pubsub/v1.11.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/pubsub dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-06-03 09:49:29 +03:00
cloud.google.com/go/pubsub v1.11.0
:seedling: Bump contrib.go.opencensus.io/exporter/stackdriver Bumps [contrib.go.opencensus.io/exporter/stackdriver](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver) from 0.13.4 to 0.13.6. - [Release notes](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/releases) - [Commits](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/compare/v0.13.4...v0.13.6) Signed-off-by: dependabot[bot] <support@github.com>
2021-05-26 20:23:19 +03:00
contrib.go.opencensus.io/exporter/stackdriver v0.13.6
Add support for and hookup app based authentication for higher rate limiting. (#69) This also configures it in our nightly cron cluster.
2020-11-13 20:06:46 +03:00
github.com/bradleyfalzon/ghinstallation v1.1.1
Add all Google-owned repositories to cron job (#555) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-09 02:55:43 +03:00
github.com/go-git/go-git/v5 v5.4.2
:seedling: Move tool dependencies into go.mod (#460) Moved the tool dependencies into go.mod
2021-05-17 22:20:28 +03:00
github.com/golangci/golangci-lint v1.40.1
Initial commit.
2020-10-09 17:47:59 +03:00
github.com/google/go-github/v32 v32.1.0
Add all Google-owned repositories to cron job (#555) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-09 02:55:43 +03:00
github.com/google/go-github/v33 v33.0.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
github.com/google/go-querystring v1.1.0 // indirect
:sparkles: Binary Artifact check (#563) * Implemented binary artifact checks
2021-06-21 18:49:31 +03:00
github.com/h2non/filetype v1.1.1
✨ Cron job uses line-delimited JSON (#344) * :sparkles: Refactor to reduce code duplication * :sparkles: * Move lib/ back to checker/ * Move lib/ back to checker/ * Move lib/ back to checker/ * Address PR comments. * Addressing PR comments. * Separate out ReposURL nito repos/ * Add TODO in gitcache module. * Add RepoRequest/Response types. * Avoid printing `ShouldRetry` and `Error` in output JSON. * Fix JSON output. * Simplify cmd package. * Make cron/ a package instead of module. * Fix TODO. * Remove binary file. * go.mod file. * go.mod updates. * Refactor cron to use in-memory JSON. * Fix JSON output. * Fix go.mod * Address PR comments. * Change %w -> %v. * Address PR comments. * Fix err. Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-04-19 22:49:51 +03:00
github.com/jszwec/csvutil v1.5.0
:sparkles: Add check for Docker dependency pinning by hash (#469) * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * update unit tests * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * remove log * check fix * comment * linter * commments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * check fix * comment * commments * comments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * check fix * check dependencies pinning in docker files * check docker files hash pinning * check fix * commments * comments * comments * comments * update mod * remove continue keyword * linter * linter * linter * comments * cleanup * linter * typos * typos
2021-05-19 19:46:39 +03:00
github.com/moby/buildkit v0.8.3
Feat- Use cloud buckets for caching Use cloud buckets for httpcache. The implementation uses https://github.com/google/go-cloud for it to be cloud vendor agnostic.
2021-02-23 18:01:49 +03:00
github.com/naveensrinivasan/httpcache v1.2.2
:seedling: Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.4 (#537) Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.16.2 to 1.16.4. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v1.16.2...v1.16.4) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-06-04 06:02:05 +03:00
github.com/onsi/ginkgo v1.16.4
:seedling: Bump github.com/onsi/gomega from 1.12.0 to 1.13.0 (#515) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.12.0 to 1.13.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.12.0...v1.13.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-28 19:00:16 +03:00
github.com/onsi/gomega v1.13.0
Fix - default disk cache size The default disk cache size is 100mb. Changed the default disk cache to 10gb.
2021-02-23 01:19:26 +03:00
github.com/peterbourgon/diskv v2.0.1+incompatible
Feat-Implement httpcache middleware for GitHub API (#203) The GitHub API supports conditional requests https://docs.github.com/en/rest/overview/resources-in-the-rest-api#conditional-requests https://github.com/google/go-github supports Conditional requests https://github.com/google/go-github#conditional-requests As we are scaling more and more projects this would add a lot of value. Initial run fetches information using `httpcache` as a middleware, which caches the HTTP response initially in a large disk (PVC), probably move to Redis later as a cache instead of disk. Subsequent `cron runs` will utilize the `httpcache` for checking content modification and load it from the cache if it isn't modified, which reduces the hitting the Rate Limit of the GitHub API.
2021-02-22 20:18:28 +03:00
github.com/pkg/errors v0.9.1
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
github.com/shurcooL/githubv4 v0.0.0-20201206200315-234843c633fa
Use the GraphQL API to retrieve the list of tags in signed-tags. (#45)
2020-11-07 00:28:26 +03:00
github.com/shurcooL/graphql v0.0.0-20200928012149-18c5c3165e3a // indirect
Bump github.com/spf13/cobra from 1.1.2 to 1.1.3 Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.2 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.2...v1.1.3) Signed-off-by: dependabot[bot] <support@github.com>
2021-02-11 09:58:40 +03:00
github.com/spf13/cobra v1.1.3
Add monitoring to checks (#480) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-21 09:47:49 +03:00
go.opencensus.io v0.23.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
go.uber.org/multierr v1.7.0 // indirect
:seedling: Bump go.uber.org/zap from 1.16.0 to 1.17.0 (#509) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.16.0 to 1.17.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/zap/compare/v1.16.0...v1.17.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-26 22:11:44 +03:00
go.uber.org/zap v1.17.0
:seedling: Bump gocloud.dev from 0.22.0 to 0.23.0 (#464) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-26 20:06:23 +03:00
gocloud.dev v0.23.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a // indirect
golang.org/x/net v0.0.0-20210510120150-4163338589ed // indirect
Add all Google-owned repositories to cron job (#555) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-09 02:55:43 +03:00
golang.org/x/tools v0.1.2-0.20210512205948-8287d5da45e4
:seedling: Bump cloud.google.com/go/pubsub from 1.10.3 to 1.11.0 Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.10.3 to 1.11.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.10.3...pubsub/v1.11.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/pubsub dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-06-03 09:49:29 +03:00
google.golang.org/genproto v0.0.0-20210524142926-3e3a6030be83
Setup PubSub framework code. (#428) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-15 00:32:23 +03:00
google.golang.org/protobuf v1.26.0
:sparkles: Generate docs using go instead of python * Implemented the doc generation from python to go * Removed the need for json * Sorted the output of the generated markdown
2021-05-02 22:04:04 +03:00
gopkg.in/yaml.v2 v2.4.0
✨ Check: detect downloads of scripts/binaries in docker's RUN (#584) * commit 1 * commit 2 * commit 3 * updates * linter * update year * cleanup * linter * fix test files * linter * comments
2021-06-21 21:45:15 +03:00
mvdan.cc/sh/v3 v3.3.0
Initial commit.
2020-10-09 17:47:59 +03:00
)
Reference in New Issue Copy Permalink