ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-11-04 20:30:19 +03:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
ee6acdd6a6
scorecard/go.mod

39 lines
1.3 KiB
Modula-2
Raw Normal View History

:seedling: Fix the go.mod with v2 upgrade (#716) The go.mod and the related files weren't t updated with the v2 upgrade. https://github.com/ossf/scorecard/issues/711 This fix will address the issue.
2021-07-26 21:01:25 +03:00
module github.com/ossf/scorecard/v2
Initial commit.
2020-10-09 17:47:59 +03:00
feat - migrate to go 1.16 (#233) Upgrade to go version 1.16
2021-03-03 21:56:29 +03:00
go 1.16
Initial commit.
2020-10-09 17:47:59 +03:00
require (
:seedling: Bump cloud.google.com/go/bigquery from 1.20.1 to 1.21.0 (#870) Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.20.1 to 1.21.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/bigquery/v1.20.1...spanner/v1.21.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/bigquery dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-08-18 21:48:16 +03:00
cloud.google.com/go/bigquery v1.21.0
:seedling: Bump cloud.google.com/go/pubsub from 1.15.0 to 1.16.0 (#904) Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.15.0 to 1.16.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.15.0...pubsub/v1.16.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/pubsub dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-08-30 05:00:18 +03:00
cloud.google.com/go/datacatalog v0.1.0 // indirect
cloud.google.com/go/monitoring v0.1.0 // indirect
cloud.google.com/go/pubsub v1.16.0
cloud.google.com/go/trace v0.1.0 // indirect
:seedling: Bump contrib.go.opencensus.io/exporter/stackdriver (#579) Bumps [contrib.go.opencensus.io/exporter/stackdriver](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver) from 0.13.6 to 0.13.8. - [Release notes](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/releases) - [Commits](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/compare/v0.13.6...v0.13.8) --- updated-dependencies: - dependency-name: contrib.go.opencensus.io/exporter/stackdriver dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-06-29 07:21:12 +03:00
contrib.go.opencensus.io/exporter/stackdriver v0.13.8
Add support for and hookup app based authentication for higher rate limiting. (#69) This also configures it in our nightly cron cluster.
2020-11-13 20:06:46 +03:00
github.com/bradleyfalzon/ghinstallation v1.1.1
Add all Google-owned repositories to cron job (#555) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-09 02:55:43 +03:00
github.com/go-git/go-git/v5 v5.4.2
Create and use MockRepoClient in unit tests (#922) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-08-26 22:48:39 +03:00
github.com/golang/mock v1.6.0
:seedling: Bump github.com/golangci/golangci-lint from 1.41.1 to 1.42.0 (#869) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.41.1 to 1.42.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.41.1...v1.42.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-18 16:42:02 +03:00
github.com/golangci/golangci-lint v1.42.0
:seedling: Implemented ignore for license check The license check was updated with the ignore files. Fixed the issue https://github.com/ossf/scorecard/issues/767
2021-08-09 23:11:04 +03:00
github.com/google/addlicense v0.0.0-20210809195240-d43bb61fdfda
:seedling: Bump cloud.google.com/go/pubsub from 1.11.0 to 1.12.0 Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.12.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.11.0...pubsub/v1.12.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/pubsub dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-06-28 23:44:15 +03:00
github.com/google/go-cmp v0.5.6
:seedling: Bump github.com/google/go-containerregistry (#832) Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.1.2 to 0.6.0. - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](https://github.com/google/go-containerregistry/compare/v0.1.2...v0.6.0) --- updated-dependencies: - dependency-name: github.com/google/go-containerregistry dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-08-11 19:43:35 +03:00
github.com/google/go-containerregistry v0.6.0
Update go-github version for consistency (#852) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-08-13 03:43:22 +03:00
github.com/google/go-github/v38 v38.1.0
:sparkles: Binary Artifact check (#563) * Implemented binary artifact checks
2021-06-21 18:49:31 +03:00
github.com/h2non/filetype v1.1.1
✨ Cron job uses line-delimited JSON (#344) * :sparkles: Refactor to reduce code duplication * :sparkles: * Move lib/ back to checker/ * Move lib/ back to checker/ * Move lib/ back to checker/ * Address PR comments. * Addressing PR comments. * Separate out ReposURL nito repos/ * Add TODO in gitcache module. * Add RepoRequest/Response types. * Avoid printing `ShouldRetry` and `Error` in output JSON. * Fix JSON output. * Simplify cmd package. * Make cron/ a package instead of module. * Fix TODO. * Remove binary file. * go.mod file. * go.mod updates. * Refactor cron to use in-memory JSON. * Fix JSON output. * Fix go.mod * Address PR comments. * Change %w -> %v. * Address PR comments. * Fix err. Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-04-19 22:49:51 +03:00
github.com/jszwec/csvutil v1.5.0
:sparkles: Add check for Docker dependency pinning by hash (#469) * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * update unit tests * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * remove log * check fix * comment * linter * commments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * check fix * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * remove log * check fix * comment * commments * comments * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check pinning in docker files * Revert "check pinning in docker files" This reverts commit c05a5007b11badfe68e1ce8f8574356457a53f8f. * check dependencies pinning in docker files * check docker files hash pinning * remove logging * make keyword matches case-insensitive * check fix * check dependencies pinning in docker files * check docker files hash pinning * check fix * commments * comments * comments * comments * update mod * remove continue keyword * linter * linter * linter * comments * cleanup * linter * typos * typos
2021-05-19 19:46:39 +03:00
github.com/moby/buildkit v0.8.3
:sparkles: Table output for the results * Included the table output in the default results
2021-07-07 00:11:20 +03:00
github.com/olekukonko/tablewriter v0.0.5
:seedling: Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.4 (#537) Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.16.2 to 1.16.4. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v1.16.2...v1.16.4) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-06-04 06:02:05 +03:00
github.com/onsi/ginkgo v1.16.4
:seedling: Bump github.com/onsi/gomega from 1.15.0 to 1.16.0 (#879) Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.15.0 to 1.16.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.15.0...v1.16.0) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-23 19:18:46 +03:00
github.com/onsi/gomega v1.16.0
:sparkles: Add checks for workflow action pinning (#466) Patch by Laurent Simon <laurentsimon@google.com> Co-authored-by: Laurent Simon <laurentsimon@google.com>
2021-05-17 23:03:39 +03:00
github.com/shurcooL/githubv4 v0.0.0-20201206200315-234843c633fa
Use the GraphQL API to retrieve the list of tags in signed-tags. (#45)
2020-11-07 00:28:26 +03:00
github.com/shurcooL/graphql v0.0.0-20200928012149-18c5c3165e3a // indirect
:seedling: Bump github.com/spf13/cobra from 1.2.0 to 1.2.1 Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.2.0...v1.2.1) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-07-05 11:25:42 +03:00
github.com/spf13/cobra v1.2.1
✨ Add JSON unit tests (#915) * fix * typo * draft * fixes * typo * add validator * comments * typo
2021-08-26 04:42:34 +03:00
github.com/xeipuuv/gojsonschema v0.0.0-20180618132009-1d523034197f
Add monitoring to checks (#480) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-21 09:47:49 +03:00
go.opencensus.io v0.23.0
:seedling: Bump go.uber.org/zap from 1.18.1 to 1.19.0 (#834) Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.18.1 to 1.19.0. - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/zap/compare/v1.18.1...v1.19.0) --- updated-dependencies: - dependency-name: go.uber.org/zap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-08-16 01:55:20 +03:00
go.uber.org/zap v1.19.0
:seedling: Bump gocloud.dev from 0.22.0 to 0.23.0 (#464) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-05-26 20:06:23 +03:00
gocloud.dev v0.23.0
:seedling: Bump golang.org/x/tools from 0.1.4 to 0.1.5 (#691) Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.1.4 to 0.1.5. - [Release notes](https://github.com/golang/tools/releases) - [Commits](https://github.com/golang/tools/compare/v0.1.4...v0.1.5) --- updated-dependencies: - dependency-name: golang.org/x/tools dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-07-14 17:50:36 +03:00
golang.org/x/tools v0.1.5
:seedling: Bump cloud.google.com/go/pubsub from 1.15.0 to 1.16.0 (#904) Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.15.0 to 1.16.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.15.0...pubsub/v1.16.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/pubsub dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-08-30 05:00:18 +03:00
google.golang.org/genproto v0.0.0-20210821163610-241b8fcbd6c8
:seedling: Bump google.golang.org/protobuf from 1.26.0 to 1.27.1 (#624) Bumps [google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go) from 1.26.0 to 1.27.1. - [Release notes](https://github.com/protocolbuffers/protobuf-go/releases) - [Changelog](https://github.com/protocolbuffers/protobuf-go/blob/master/release.bash) - [Commits](https://github.com/protocolbuffers/protobuf-go/compare/v1.26.0...v1.27.1) --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-06-29 18:42:40 +03:00
google.golang.org/protobuf v1.27.1
:sparkles: Generate docs using go instead of python * Implemented the doc generation from python to go * Removed the need for json * Sorted the output of the generated markdown
2021-05-02 22:04:04 +03:00
gopkg.in/yaml.v2 v2.4.0
:seedling: Bump mvdan.cc/sh/v3 from 3.3.0 to 3.3.1 (#797) Bumps [mvdan.cc/sh/v3](https://github.com/mvdan/sh) from 3.3.0 to 3.3.1. - [Release notes](https://github.com/mvdan/sh/releases) - [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md) - [Commits](https://github.com/mvdan/sh/compare/v3.3.0...v3.3.1) --- updated-dependencies: - dependency-name: mvdan.cc/sh/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-02 16:19:22 +03:00
mvdan.cc/sh/v3 v3.3.1
Initial commit.
2020-10-09 17:47:59 +03:00
)
Reference in New Issue Copy Permalink