yash-zededa

Results 12 comments of yash-zededa

Use sbom-scorecard in GH action to catch regressions?

@eriknordmark this would be a good addition for the SBOM stuff. @deitch IMHO it should be the part of github actions - it would be quite simple and efficient to...

Pin GitHub Actions with Commit Hash to Prevent Issues in Case of Repo Compromise

@shjala @rene I'll work on it and put together a list of actions related to the commit that we can use