All pull requests

Pull requests

• 🐛 Prevent author association leak and pointer aliasing in GitLab issues handler

  #5381·vishnums2k5 opened Oct 28, 2026·2 tasks done·

  ·

• Detect docker/bake-action with push in packaging check

  #5380·Daniel-park10 opened Oct 28, 2026·

  ·
  1

• 🌱 Bump chainguard/static from fe55470 to 9e2306b

  dependenciesdocker
  #5373·dependabot[bot] opened Oct 27, 2026Bot·

  ·

• 🌱 Bump golang from 5bc7f57 to 8201530 in the golang group across 1 directory

  dependenciesdocker
  #5372·dependabot[bot] opened Oct 27, 2026Bot·

  ·

• 🐛 Return an error instead of panicking when a PyPI response has no project_urls

  #5370·drawliin opened Oct 27, 2026·2 tasks done·

  ·
  1

• 🐛 Detect license files in .github directory

  #5367·cpanato opened Oct 26, 2026Member·2 tasks done·

  ·
  1

  2

• 🐛 Verify Azure DevOps CI build evidence

  #5362·JamieMagee opened Oct 25, 2026Member·2 tasks done·

  ·
  2

• 🐛 Handle nil HTTP response in GitLab branch protection handler

  #5359·vishnums2k5 opened Oct 23, 2026·1 task done·

  ·
  3

• 🌱 Bump the github-actions group across 1 directory with 6 updates

  dependenciesgithub_actions
  #5358·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• 🌱 Bump github.com/golangci/golangci-lint/v2 from 2.14.0 to 2.15.0 in /tools

  dependenciesgo
  #5357·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• 🌱 Bump github.com/moby/buildkit from 0.32.2 to 0.34.1

  dependenciesgo
  #5356·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• 🌱 Bump the golang group across 2 directories with 1 update

  dependenciesdocker
  #5354·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• 🌱 Use os.Root to extract and read remote repository archives

  #5353·Thanatos9404 opened Oct 22, 2026·2 tasks done·

  ·
  7

• 🐛 Pinned-Dependencies: keep scanning Directory.*.props until central package management is found

  #5348·jeffersonnlucas opened Oct 19, 2026·2 tasks done·

  ·
  1

• 🌱 Run unit tests on Windows in CI

  #5347·jessehouwing opened Oct 18, 2026·1 of 2 tasks·

  ·

• 🐛 Fail fast when the GitHub rate limit resets after the deadline

  #5343·jessehouwing opened Oct 18, 2026·2 tasks done·

  ·
  1

• 🐛 Fix Windows path handling and file handle bugs

  #5342·jessehouwing opened Oct 18, 2026·2 tasks done·

  ·
  1

• 🐛 Fix completion for installed scorecard command

  #5341·0x5t4l1n opened Oct 18, 2026·2 tasks done·

  ·
  1

• 🐛 Use latest GitLab commit date for merge requests

  #5339·XY-code1 opened Oct 17, 2026·

  ·
  6

• 🌱 Bump github.com/google/osv-scanner/v2 from 2.5.1 to 2.7.0

  dependenciesgo
  #5330·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• ✨ Security-Policy: credit private vulnerability reporting

  #5324·venkatapgummadi opened Oct 13, 2026·2 tasks done·

  ·
  1

• ✨ Packaging: score OpenID Connect trusted publishing above long-lived tokens

  #5323·venkatapgummadi opened Oct 13, 2026·2 tasks done·

  ·
  1

• 🐛 fix(pinned-dependencies): handle Dockerfile syntax parser directives cleanly

  #5318·AdamMagued opened Oct 12, 2026·2 tasks done·

  ·
  1

• 🐛 Consistently exclude testdata directories from file scans

  #5317·royy92 opened Oct 12, 2026·2 tasks done·

  ·

• 🐛 Packaging: detect npm publishing when registry-url has a trailing slash

  #5316·daniel63194 opened Oct 12, 2026·2 tasks done·

  ·