scorecard/.github/workflows
dependabot[bot] 76878e5b4d
🌱 Bump the github-actions group with 2 updates (#3686)
Bumps the github-actions group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [actions/github-script](https://github.com/actions/github-script).


Updates `step-security/harden-runner` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](1b05615854...eb238b55ef)

Updates `actions/github-script` from 6.4.1 to 7.0.1
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](d7906e4ad0...60a0d83039)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-20 12:16:39 -05:00
..
codeql-analysis.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
depsreview.yml 🌱 Bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 in /tools (#3660) 2023-11-13 10:58:51 -08:00
docker.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
gitlab.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
goreleaser.yaml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
integration.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
lint.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
main.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
publishimage.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
scdiff.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
scorecard-analysis.yml 🌱 Bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#3599) 2023-10-27 23:44:15 +00:00
slsa-goreleaser.yml 🌱 Bump slsa-framework/slsa-verifier from 2.4.0 to 2.4.1 (#3652) 2023-11-09 01:34:39 +00:00
stale.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00
verify.yml 🌱 Bump the github-actions group with 2 updates (#3686) 2023-11-20 12:16:39 -05:00