actions

mirror of https://github.com/ivuorinen/actions.git synced 2026-03-09 18:57:10 +00:00

Files

Ismo Vuorinen a0cc32995f feat(security): add OpenSSF Scorecard workflow and maximize score (#498 )

* feat(security): add OpenSSF Scorecard workflow and maximize score

- Add scorecard.yml workflow (weekly + push to main) with SARIF upload
- Add CONTRIBUTING.md for contributor guidelines
- Add SLSA provenance attestation job to release workflow
- Add CycloneDX SBOM generation job to release workflow
- Pin Dockerfile base images to sha256 digests
- Enable Renovate pinDigests and platformAutomerge
- Add OpenSSF Scorecard badge to README

* fix(docs): address PR #498 review comments and remove .coderabbit.yaml

- Delete .coderabbit.yaml (falls back to shared org-level config)
- Add missing linter deps to CONTRIBUTING.md install step
- Separate make all and make test into distinct steps
- Fix line length note to match EditorConfig (200 chars, no MD override)
- Add yamllint/markdownlint to YAML/JSON/Markdown linter list
- Refine action references guidance
- Expand "Adding a New Action" section with action-docs and catalog info

2026-03-09 01:59:07 +02:00

docker-testing-tools

feat(security): add OpenSSF Scorecard workflow and maximize score (#498 )

2026-03-09 01:59:07 +02:00

bump-major-version.sh

feat(ci): versioning change (#378 )

2025-11-28 10:56:52 +02:00

check-version-refs.sh

chore(claude): add hooks, skills, and agents for Claude Code (#496 )

2026-03-08 04:22:02 +02:00

fix-local-action-refs.py

feat: fixes, tweaks, new actions, linting (#186 )