ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-11-04 03:52:31 +03:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
4cbb1a6062
scorecard/go.mod

40 lines
1.4 KiB
Modula-2
Raw Normal View History

Rename repo/modules.
2020-10-27 22:23:48 +03:00
module github.com/ossf/scorecard
Initial commit.
2020-10-09 17:47:59 +03:00
feat - migrate to go 1.16 (#233) Upgrade to go version 1.16
2021-03-03 21:56:29 +03:00
go 1.16
Initial commit.
2020-10-09 17:47:59 +03:00
require (
:seedling: Bump cloud.google.com/go/bigquery from 1.18.0 to 1.19.0 (#635) Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.18.0 to 1.19.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.18.0...spanner/v1.19.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/bigquery dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-30 21:54:01 +03:00
cloud.google.com/go/bigquery v1.19.0
:seedling: Bump cloud.google.com/go/pubsub from 1.11.0 to 1.12.0 Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.12.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.11.0...pubsub/v1.12.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/pubsub dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-06-28 23:44:15 +03:00
cloud.google.com/go/pubsub v1.12.0
:seedling: Bump contrib.go.opencensus.io/exporter/stackdriver (#579) Bumps [contrib.go.opencensus.io/exporter/stackdriver](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver) from 0.13.6 to 0.13.8. - [Release notes](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/releases) - [Commits](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/compare/v0.13.6...v0.13.8) --- updated-dependencies: - dependency-name: contrib.go.opencensus.io/exporter/stackdriver dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-06-29 07:21:12 +03:00
contrib.go.opencensus.io/exporter/stackdriver v0.13.8
Add support for and hookup app based authentication for higher rate limiting. (#69) This also configures it in our nightly cron cluster.
2020-11-13 20:06:46 +03:00
github.com/bradleyfalzon/ghinstallation v1.1.1
Add all Google-owned repositories to cron job (#555) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-09 02:55:43 +03:00
github.com/go-git/go-git/v5 v5.4.2
:seedling: Bump github.com/golangci/golangci-lint from 1.40.1 to 1.41.1 (#627) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.40.1 to 1.41.1. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.40.1...v1.41.1) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Azeem Shaikh <azeems@google.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-06-29 20:26:16 +03:00
github.com/golangci/golangci-lint v1.41.1
:seedling: Fix broken e2e tests * Changed the path for the frozen deps to look for within the .github/worworkflows path * Included license check to tools.go * Removed the hard reference to ginkgo within the integration.yml * The above fixes will fix the broken tests for scorecard. Repo: github.com/ossf/scorecard Frozen-Deps: Fail 10 go modules found: go.mod !! frozen-deps/fetch-execute - .github/workflows/integration.yml is fetching an non-pinned dependency 'go get github.com/onsi/ginkgo/ginkgo@v1.14.2' !! frozen-deps/fetch-execute - .github/workflows/main.yml is fetching an non-pinned dependency 'go install github.com/google/addlicense@latest'
2021-06-28 22:32:42 +03:00
github.com/google/addlicense v0.0.0-20210428195630-6d92264d7170
:seedling: Bump cloud.google.com/go/pubsub from 1.11.0 to 1.12.0 Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.12.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.11.0...pubsub/v1.12.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/pubsub dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-06-28 23:44:15 +03:00
github.com/google/go-cmp v0.5.6
Initial commit.
2020-10-09 17:47:59 +03:00
github.com/google/go-github/v32 v32.1.0
Add all Google-owned repositories to cron job (#555) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-09 02:55:43 +03:00
github.com/google/go-github/v33 v33.0.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
github.com/google/go-querystring v1.1.0 // indirect
:sparkles: Binary Artifact check (#563) * Implemented binary artifact checks
2021-06-21 18:49:31 +03:00
github.com/h2non/filetype v1.1.1
✨ Cron job uses line-delimited JSON (#344) * :sparkles: Refactor to reduce code duplication * :sparkles: * Move lib/ back to checker/ * Move lib/ back to checker/ * Move lib/ back to checker/ * Address PR comments. * Addressing PR comments. * Separate out ReposURL nito repos/ * Add TODO in gitcache module. * Add RepoRequest/Response types. * Avoid printing `ShouldRetry` and `Error` in output JSON. * Fix JSON output. * Simplify cmd package. * Make cron/ a package instead of module. * Fix TODO. * Remove binary file. * go.mod file. * go.mod updates. * Refactor cron to use in-memory JSON. * Fix JSON output. * Fix go.mod * Address PR comments. * Change %w -> %v. * Address PR comments. * Fix err. Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-04-19 22:49:51 +03:00
github.com/jszwec/csvutil v1.5.0
:sparkles: Add check for Docker dependency pinning by hash (#469) * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * update unit tests * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * remove log * check fix * comment * linter * commments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * check fix * comment * commments * comments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * check fix * check dependencies pinning in docker files * check docker files hash pinning * check fix * commments * comments * comments * comments * update mod * remove continue keyword * linter * linter * linter * comments * cleanup * linter * typos * typos
2021-05-19 19:46:39 +03:00
github.com/moby/buildkit v0.8.3
Feat- Use cloud buckets for caching Use cloud buckets for httpcache. The implementation uses https://github.com/google/go-cloud for it to be cloud vendor agnostic.
2021-02-23 18:01:49 +03:00
github.com/naveensrinivasan/httpcache v1.2.2
:seedling: Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.4 (#537) Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.16.2 to 1.16.4. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v1.16.2...v1.16.4) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-06-04 06:02:05 +03:00
github.com/onsi/ginkgo v1.16.4
:seedling: Bump github.com/onsi/gomega from 1.12.0 to 1.13.0 (#515) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.12.0 to 1.13.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.12.0...v1.13.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-28 19:00:16 +03:00
github.com/onsi/gomega v1.13.0
Fix - default disk cache size The default disk cache size is 100mb. Changed the default disk cache to 10gb.
2021-02-23 01:19:26 +03:00
github.com/peterbourgon/diskv v2.0.1+incompatible
Feat-Implement httpcache middleware for GitHub API (#203) The GitHub API supports conditional requests https://docs.github.com/en/rest/overview/resources-in-the-rest-api#conditional-requests https://github.com/google/go-github supports Conditional requests https://github.com/google/go-github#conditional-requests As we are scaling more and more projects this would add a lot of value. Initial run fetches information using `httpcache` as a middleware, which caches the HTTP response initially in a large disk (PVC), probably move to Redis later as a cache instead of disk. Subsequent `cron runs` will utilize the `httpcache` for checking content modification and load it from the cache if it isn't modified, which reduces the hitting the Rate Limit of the GitHub API.
2021-02-22 20:18:28 +03:00
github.com/pkg/errors v0.9.1
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
github.com/shurcooL/githubv4 v0.0.0-20201206200315-234843c633fa
Use the GraphQL API to retrieve the list of tags in signed-tags. (#45)
2020-11-07 00:28:26 +03:00
github.com/shurcooL/graphql v0.0.0-20200928012149-18c5c3165e3a // indirect
:seedling: Bump github.com/spf13/cobra from 1.2.0 to 1.2.1 Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.2.0...v1.2.1) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-07-05 11:25:42 +03:00
github.com/spf13/cobra v1.2.1
Add monitoring to checks (#480) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-21 09:47:49 +03:00
go.opencensus.io v0.23.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
go.uber.org/multierr v1.7.0 // indirect
:seedling: Bump go.uber.org/zap from 1.17.0 to 1.18.1 (#625) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.17.0 to 1.18.1. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/zap/compare/v1.17.0...v1.18.1) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-06-29 01:49:51 +03:00
go.uber.org/zap v1.18.1
:seedling: Bump gocloud.dev from 0.22.0 to 0.23.0 (#464) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-26 20:06:23 +03:00
gocloud.dev v0.23.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a // indirect
golang.org/x/net v0.0.0-20210510120150-4163338589ed // indirect
:seedling: Bump golang.org/x/tools from 0.1.3 to 0.1.4 (#626) Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.1.3 to 0.1.4. - [Release notes](https://github.com/golang/tools/releases) - [Commits](https://github.com/golang/tools/compare/v0.1.3...v0.1.4) --- updated-dependencies: - dependency-name: golang.org/x/tools dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-06-29 11:23:05 +03:00
golang.org/x/tools v0.1.4
:seedling: Bump cloud.google.com/go/bigquery from 1.18.0 to 1.19.0 (#635) Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.18.0 to 1.19.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.18.0...spanner/v1.19.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/bigquery dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-30 21:54:01 +03:00
google.golang.org/genproto v0.0.0-20210624174822-c5cf32407d0a
:seedling: Bump google.golang.org/protobuf from 1.26.0 to 1.27.1 (#624) Bumps [google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go) from 1.26.0 to 1.27.1. - [Release notes](https://github.com/protocolbuffers/protobuf-go/releases) - [Changelog](https://github.com/protocolbuffers/protobuf-go/blob/master/release.bash) - [Commits](https://github.com/protocolbuffers/protobuf-go/compare/v1.26.0...v1.27.1) --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-06-29 18:42:40 +03:00
google.golang.org/protobuf v1.27.1
:sparkles: Generate docs using go instead of python * Implemented the doc generation from python to go * Removed the need for json * Sorted the output of the generated markdown
2021-05-02 22:04:04 +03:00
gopkg.in/yaml.v2 v2.4.0
✨ Check: detect downloads of scripts/binaries in docker's RUN (#584) * commit 1 * commit 2 * commit 3 * updates * linter * update year * cleanup * linter * fix test files * linter * comments
2021-06-21 21:45:15 +03:00
mvdan.cc/sh/v3 v3.3.0
Initial commit.
2020-10-09 17:47:59 +03:00
)
Reference in New Issue Copy Permalink