secure-repo icon indicating copy to clipboard operation
secure-repo copied to clipboard

Orchestrate GitHub Actions Security

Results 320 secure-repo issues
Sort by recently updated
recently updated
newest added

Knowledge Base is missing for akhilerm/tag-push-action.

knowledge-base

Bumps [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login) from 1.3.3 to 1.5.1. Release notes Sourced from aws-actions/amazon-ecr-login's releases. v1.5.1 See the changelog for details about the changes included in this release. v1.5.0 See the changelog for...

dependencies
github_actions

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 1.4.5 to 1.5.0. Release notes Sourced from step-security/harden-runner's releases. v1.5.0 What's Changed Add cache endpoint to allowed list automatically by @​h0x0er and @​varunsh-coder in step-security/harden-runner#186 Improve annotation...

dependencies
github_actions

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.8.0 to 0.11.0. Release notes Sourced from github.com/google/go-containerregistry's releases. v0.11.0 Changelog b7b4eada Add unit test covering .dockerconfigjson secrets (#1335) 31786c6c Bump deps using ./hack/bump-deps.sh (#1410) f79ec219 Deprecate...

dependencies
go

Bumps [github.com/aws/aws-lambda-go](https://github.com/aws/aws-lambda-go) from 1.30.0 to 1.34.1. Release notes Sourced from github.com/aws/aws-lambda-go's releases. v1.34.1 What's Changed fix godoc typo in example for WithEnableSIGTERM by @​bmoffatt in aws/aws-lambda-go#461 Full Changelog: https://github.com/aws/aws-lambda-go/compare/v1.34.0...v1.34.1 v1.34.0...

dependencies
go

Bumps [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) from 1.1.0 to 1.2.0. Release notes Sourced from github.com/jarcoal/httpmock's releases. v1.2.0 New features: NewNotFoundResponder helps to detect a possible path mistake (final / or double / cases); add...

dependencies
go

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.0.0 to 3.1.0. Release notes Sourced from actions/upload-artifact's releases. v3.1.0 What's Changed Bump @​actions/artifact to v1.1.0 (actions/upload-artifact#327) Adds checksum headers on artifact upload (actions/toolkit#1095) (actions/toolkit#1063) Commits 3cea537...

dependencies
github_actions

Bumps lambda/provided from `474828b` to `d1a684c`. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lambda/provided&package-manager=docker&previous-version=al2&new-version=al2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies
docker

This PR adds a YAML file to describe token permissions needed for Action: ifaxity/wait-on-action. Fixes #1232

Knowledge Base is missing for ifaxity/wait-on-action.

knowledge-base