ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-09-17 11:57:12 +03:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity
78933ac2f4
scorecard/go.mod

38 lines
1.5 KiB
Modula-2
Raw Normal View History

Rename repo/modules.
2020-10-27 22:23:48 +03:00
module github.com/ossf/scorecard
Initial commit.
2020-10-09 17:47:59 +03:00
feat - migrate to go 1.16 (#233) Upgrade to go version 1.16
2021-03-03 21:56:29 +03:00
go 1.16
Initial commit.
2020-10-09 17:47:59 +03:00
require (
Use TRUNCATE to load data into BigQuery (#476) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-20 09:59:40 +03:00
cloud.google.com/go/bigquery v1.8.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
cloud.google.com/go/storage v1.15.0 // indirect
Add support for and hookup app based authentication for higher rate limiting. (#69) This also configures it in our nightly cron cluster.
2020-11-13 20:06:46 +03:00
github.com/bradleyfalzon/ghinstallation v1.1.1
:seedling: Move tool dependencies into go.mod (#460) Moved the tool dependencies into go.mod
2021-05-17 22:20:28 +03:00
github.com/golangci/golangci-lint v1.40.1
Initial commit.
2020-10-09 17:47:59 +03:00
github.com/google/go-github/v32 v32.1.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
github.com/google/go-querystring v1.1.0 // indirect
github.com/google/wire v0.5.0 // indirect
✨ Cron job uses line-delimited JSON (#344) * :sparkles: Refactor to reduce code duplication * :sparkles: * Move lib/ back to checker/ * Move lib/ back to checker/ * Move lib/ back to checker/ * Address PR comments. * Addressing PR comments. * Separate out ReposURL nito repos/ * Add TODO in gitcache module. * Add RepoRequest/Response types. * Avoid printing `ShouldRetry` and `Error` in output JSON. * Fix JSON output. * Simplify cmd package. * Make cron/ a package instead of module. * Fix TODO. * Remove binary file. * go.mod file. * go.mod updates. * Refactor cron to use in-memory JSON. * Fix JSON output. * Fix go.mod * Address PR comments. * Change %w -> %v. * Address PR comments. * Fix err. Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-04-19 22:49:51 +03:00
github.com/jszwec/csvutil v1.5.0
:sparkles: Add check for Docker dependency pinning by hash (#469) * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * update unit tests * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * remove log * check fix * comment * linter * commments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * check fix * comment * commments * comments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * check fix * check dependencies pinning in docker files * check docker files hash pinning * check fix * commments * comments * comments * comments * update mod * remove continue keyword * linter * linter * linter * comments * cleanup * linter * typos * typos
2021-05-19 19:46:39 +03:00
github.com/moby/buildkit v0.8.3
Feat- Use cloud buckets for caching Use cloud buckets for httpcache. The implementation uses https://github.com/google/go-cloud for it to be cloud vendor agnostic.
2021-02-23 18:01:49 +03:00
github.com/naveensrinivasan/httpcache v1.2.2
:seedling: Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2 Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.16.1 to 1.16.2. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v1.16.1...v1.16.2) Signed-off-by: dependabot[bot] <support@github.com>
2021-05-05 09:47:37 +03:00
github.com/onsi/ginkgo v1.16.2
:seedling: Bump github.com/onsi/gomega from 1.11.0 to 1.12.0 (#407) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.11.0 to 1.12.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.11.0...v1.12.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-09 19:05:53 +03:00
github.com/onsi/gomega v1.12.0
Fix - default disk cache size The default disk cache size is 100mb. Changed the default disk cache to 10gb.
2021-02-23 01:19:26 +03:00
github.com/peterbourgon/diskv v2.0.1+incompatible
Feat-Implement httpcache middleware for GitHub API (#203) The GitHub API supports conditional requests https://docs.github.com/en/rest/overview/resources-in-the-rest-api#conditional-requests https://github.com/google/go-github supports Conditional requests https://github.com/google/go-github#conditional-requests As we are scaling more and more projects this would add a lot of value. Initial run fetches information using `httpcache` as a middleware, which caches the HTTP response initially in a large disk (PVC), probably move to Redis later as a cache instead of disk. Subsequent `cron runs` will utilize the `httpcache` for checking content modification and load it from the cache if it isn't modified, which reduces the hitting the Rate Limit of the GitHub API.
2021-02-22 20:18:28 +03:00
github.com/pkg/errors v0.9.1
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
github.com/shurcooL/githubv4 v0.0.0-20201206200315-234843c633fa
Use the GraphQL API to retrieve the list of tags in signed-tags. (#45)
2020-11-07 00:28:26 +03:00
github.com/shurcooL/graphql v0.0.0-20200928012149-18c5c3165e3a // indirect
Bump github.com/spf13/cobra from 1.1.2 to 1.1.3 Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.2 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.2...v1.1.3) Signed-off-by: dependabot[bot] <support@github.com>
2021-02-11 09:58:40 +03:00
github.com/spf13/cobra v1.1.3
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
go.uber.org/multierr v1.7.0 // indirect
Add better logging.
2020-10-13 19:29:29 +03:00
go.uber.org/zap v1.16.0
Feat- Use cloud buckets for caching Use cloud buckets for httpcache. The implementation uses https://github.com/google/go-cloud for it to be cloud vendor agnostic.
2021-02-23 18:01:49 +03:00
gocloud.dev v0.22.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a // indirect
golang.org/x/lint v0.0.0-20210508222113-6edffad5e616 // indirect
golang.org/x/net v0.0.0-20210510120150-4163338589ed // indirect
golang.org/x/oauth2 v0.0.0-20210427180440-81ed05c6b58c
Refactor Makefile and add proto compile support. (#458) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-15 23:58:01 +03:00
golang.org/x/sys v0.0.0-20210514084401-e8d321eab015 // indirect
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
google.golang.org/api v0.46.0 // indirect
google.golang.org/genproto v0.0.0-20210513213006-bf773b8c8384 // indirect
google.golang.org/grpc v1.37.1 // indirect
Setup PubSub framework code. (#428) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-15 00:32:23 +03:00
google.golang.org/protobuf v1.26.0
Update deps.
2020-11-07 00:29:27 +03:00
gopkg.in/check.v1 v1.0.0-20200902074654-038fdea0a05b // indirect
:sparkles: Generate docs using go instead of python * Implemented the doc generation from python to go * Removed the need for json * Sorted the output of the generated markdown
2021-05-02 22:04:04 +03:00
gopkg.in/yaml.v2 v2.4.0
Initial commit.
2020-10-09 17:47:59 +03:00
)
Reference in New Issue Copy Permalink