Releases · ossf/scorecard-webapp

Fix for ossf/scorecard-action#910 and a query option to allow badge styling.

What's Changed

feat: add style query to badge endpoint by @dirien in #203
🌱 Bump ossf/scorecard-action from 2.0.0.pre.alpha.2 to 2.0.3 by @dependabot in #202
🌱 Bump golang from 1.18.5 to 1.19.1 by @dependabot in #198
🌱 Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 by @dependabot in #200
🌱 Bump github/codeql-action from 2.1.21 to 2.1.22 by @dependabot in #196
🐛 Add exception for step-security/harden-runner by @azeemshaikh38 in #204
🌱 Bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 by @dependabot in #189
🌱 Remove create-issue as acceptable step by @azeemshaikh38 in #205

New Contributors

@dirien made their first contribution in #203

Full Changelog: v1.0.0...v1.0.1

What's Changed

🌱 Skeleton to setup scorecard.dev webapp by @azeemshaikh38 in #1
🐛 Fix Dockerfile by @azeemshaikh38 in #2
✨ Expose the Scorecard webapp on external IP by @azeemshaikh38 in #3
Setup Scorecard GitHub Action by @azeemshaikh38 in #4
Create codeql-analysis.yml by @naveensrinivasan in #5
✨ Add a Security policy by @azeemshaikh38 in #6
Create dependabot.yml by @naveensrinivasan in #7
🌱 Bump ossf/scorecard-action from 0.0.1 to 0.0.2 by @dependabot in #8
Update version in workflow comment by @laurentsimon in #10
🌱 Bump distroless/base from 46d4514 to 02f6671 by @dependabot in #9
🌱 Bump ossf/scorecard-action from 0.0.2 to 1.0.1 by @dependabot in #12
✨ Add Google-managed SSL cert by @azeemshaikh38 in #13
🌱 Bump ossf/scorecard-action from 1.0.1 to 1.0.2 by @dependabot in #15
🌱 Use GITHUB_TOKEN instead of PAT by @azeemshaikh38 in #17
Fixing scorecard alerts by @abirismyname in #18
Fixing Token-Permissions issue by @abirismyname in #19
Fixing last remaining Token-Permissions issue by @abirismyname in #20
🌱 Update github/codeql-action requirement to d39d5d5c9707b926d517b1b292905ef4c03aa777 by @dependabot in #25
🌱 Bump ossf/scorecard-action from 1.0.2 to 1.0.3 by @dependabot in #16
🌱 Bump ossf/scorecard-action from 1.0.3 to 1.0.4 by @dependabot in #26
🌱 Bump actions/checkout from 2.4.0 to 3 by @dependabot in #29
🌱 Bump github/codeql-action from 1.1.2 to 1.1.3 by @dependabot in #27
🌱 Setup api.securityscorecards.dev by @azeemshaikh38 in #32
🌱 Bump actions/upload-artifact from 2.3.1 to 3 by @dependabot in #31
🌱 Bump github/codeql-action from 1.1.3 to 1.1.4 by @dependabot in #35
Scorecard site frontend by @azeemshaikh38 in #45
🌱 Dependabot PRs reviewed by scorecard-maintainers by @azeemshaikh38 in #47
fixed vulnerabilities by @mdunbavan in #48
Bump nth-check from 1.0.2 to 2.0.1 in /scorecards-site by @dependabot in #49
🌱 Bump distroless/base from 02f6671 to 792dfe7 by @dependabot in #51
🌱 Bump github/codeql-action from 1.1.4 to 1.1.5 by @dependabot in #50
🌱 Bump distroless/base from 792dfe7 to 764b74b by @dependabot in #53
🌱 Bump github/codeql-action from 1.1.5 to 2.1.6 by @dependabot in #56
Bump minimist from 1.2.5 to 1.2.6 in /scorecards-site by @dependabot in #57
🌱 Add staging and prod deployments to scorecard-site by @azeemshaikh38 in #59
🐛 Fix typo in CloudBuild config by @azeemshaikh38 in #60
🐛 Remove automatic_scaling since it's default by @azeemshaikh38 in #61
🌱 Bump github/codeql-action from 2.1.6 to 2.1.7 by @dependabot in #64
🐛 Fix UI/Content issues by @azeemshaikh38 in #67
🌱 Bump github/codeql-action from 2.1.7 to 2.1.8 by @dependabot in #68
🌱 Included dependency reviews check by @naveensrinivasan in #69
GET Endpoint for Scorecard Results Retrieval by @rohankh532 in #55
fix goat counter script load issue by @mdunbavan in #70
Fixes/goatcounter issue by @mdunbavan in #72
PR for issue #75 by @mdunbavan in #74
bump fix for sidebar not loading by @mdunbavan in #76
🌱 Bump actions/checkout from 3.0.0 to 3.0.1 by @dependabot in #77
Bump async from 2.6.3 to 2.6.4 in /scorecards-site by @dependabot in #78
🌱 Bump actions/checkout from 3.0.1 to 3.0.2 by @dependabot in #79
POST Endpoint for Scorecard Results Verification & Upload by @rohankh532 in #54
🌱 Bump github.com/sigstore/cosign from 1.7.1 to 1.7.2 by @dependabot in #84
🌱 Bump github.com/sigstore/rekor from 0.5.0 to 0.6.0 by @dependabot in #82
🌱 Bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 by @dependabot in #83
Fix Workflow Global Permissions Nil Check by @rohankh532 in #85
🌱 Bump actions/dependency-review-action from 3f943b86c9a289f4e632c632695e2e0898d9d67d to 1 by @dependabot in #91
🌱 Bump github.com/go-openapi/runtime from 0.23.3 to 0.24.1 by @dependabot in #89
🌱 Bump github/codeql-action from 2.1.8 to 2.1.10 by @dependabot in #90
🌱 Bump github.com/sigstore/cosign from 1.7.2 to 1.8.0 by @dependabot in #87
Fixed codeql to include Javascript by @naveensrinivasan in #92
🌱 Bump github/codeql-action from 2.1.10 to 2.1.11 by @dependabot in #93
🌱 Bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 by @dependabot in #94
🌱 Bump distroless/base from 764b74b to d65ac1a by @dependabot in #95
🌱 Bump actions/upload-artifact from 3.0.0 to 3.1.0 by @dependabot in #96
🌱 Bump actions/dependency-review-action from 1.0.1 to 1.0.2 by @dependabot in #97
🌱 Code cleanup by @azeemshaikh38 in #102
🌱 Bump ossf/scorecard-action from 1.0.4 to 1.1.1 by @dependabot in #101
🌱 Bump github/codeql-action from 2.1.11 to 2.1.12 by @dependabot in #100
🌱 Add CI for linter, license and build by @azeemshaikh38 in #103
🌱 Fix linter issues by @azeemshaikh38 in #105
🌱 More cleanup by @azeemshaikh38 in #107
🌱 Remove k8s file and deploy through CloudRun by @azeemshaikh38 in #109
🌱 Update the POST API request by @azeemshaikh38 in #111
🐛 Fix code causing errors in web server by @azeemshaikh38 in #114
🐛 Fix scorecard-action e2e test breakages by @azeemshaikh38 in #119
Included endorlabs as a contributor by @naveensrinivasan in #134
🌱 Replace Sigstore library calls with REST API by @azeemshaikh38 in #136
sparkles feat: add verification for fulcio issued cert by @asraa in #138
🌱 Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 by @dependabot in #115
🌱 Bump distroless/base from d65ac1a to e672eb7 by @dependabot in #117
🌱 Bump actions/dependency-review-action from 1.0.2 to 2.0.2 by @dependabot in #120
🌱 Bump ossf/scorecard-action from 1.1.1 to 1.1.2 by @dependabot in #129
🌱 Bump github/codeql-action from 2.1.12 to 2.1.16 by @dependabot in #139
🌱 Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 by @dependabot in #132
✨ Verify inclusion proof for returned Rekor entry by @azeemshaikh38 in https://gi...