Scorecards supply-chain security

Workflow runs for Scorecards supply-chain security

• refactor(compose): move publish and transform to internal/publish

  completed successfully:
  Scorecards supply-chain security#1959:Commitce67a3epushedbyglours
  main

  Nov 13, 20261m 0s
  More actions for workflow run 1959

• fix(relay): build the relay image like the compose binary

  completed successfully:
  Scorecards supply-chain security#1958:Commit5c66699pushedbyglours
  main

  Nov 12, 202658s
  More actions for workflow run 1958

• Revert "build(deps): bump github.com/spf13/pflag from 1.0.10 to 1.1.0"

  completed successfully:
  Scorecards supply-chain security#1957:Commitd99f596pushedbyndeloof
  main

  Nov 12, 20261m 12s
  More actions for workflow run 1957

• build(deps): bump golang.org/x/sync from 0.24.0 to 0.25.0

  completed successfully:
  Scorecards supply-chain security#1956:Commit11b468epushedbyndeloof
  main

  Nov 12, 202655s
  More actions for workflow run 1956

• build(deps): bump the docker-actions group with 2 updates

  completed successfully:
  Scorecards supply-chain security#1955:Commit021b5e7pushedbyndeloof
  main

  Nov 12, 202653s
  More actions for workflow run 1955

• build(deps): bump softprops/action-gh-release from 3.0.3 to 3.0.4

  completed successfully:
  Scorecards supply-chain security#1954:Commit3708825pushedbyndeloof
  main

  Nov 12, 20261m 0s
  More actions for workflow run 1954

• Scorecards supply-chain security

  completed successfully:
  Scorecards supply-chain security#1953:Scheduled
  main

  Nov 12, 202655s
  More actions for workflow run 1953

• fix(oci): tell a null "manifests" from a list, and report a host fail…

  completed successfully:
  Scorecards supply-chain security#1952:Commit7e5cddapushedbyndeloof
  main

  Nov 12, 202647s
  More actions for workflow run 1952

• chore: address the review notes left

  completed successfully:
  Scorecards supply-chain security#1951:Commite0f431cpushedbyndeloof
  main

  Nov 11, 202646s
  More actions for workflow run 1951

• build(deps): bump github.com/spf13/pflag from 1.0.10 to 1.1.0

  completed successfully:
  Scorecards supply-chain security#1950:Commit5be566dpushedbyndeloof
  main

  Nov 11, 202645s
  More actions for workflow run 1950

• build(deps): bump github/codeql-action/upload-sarif

  completed successfully:
  Scorecards supply-chain security#1949:Commit065a17epushedbyndeloof
  main

  Nov 11, 202649s
  More actions for workflow run 1949

• fix(oci): read a manifest as the document it says it is, and keep not…

  completed successfully:
  Scorecards supply-chain security#1948:Commitfb1fd12pushedbyndeloof
  main

  Nov 11, 202645s
  More actions for workflow run 1948

• Update to go1.27.4

  completed successfully:
  Scorecards supply-chain security#1947:Commit20c7fa5pushedbyndeloof
  main

  Nov 10, 202652s
  More actions for workflow run 1947

• update Go to 1.27

  completed successfully:
  Scorecards supply-chain security#1946:Commit10d6169pushedbyglours
  main

  Nov 10, 202647s
  More actions for workflow run 1946

• update to golangci-lint v2.15.0 (compatible with go1.27)

  completed successfully:
  Scorecards supply-chain security#1945:Commitfde2a0apushedbyglours
  main

  Nov 10, 20261m 10s
  More actions for workflow run 1945

• refactor(oci): keep the extracted artifacts in an "oci" directory of …

  completed successfully:
  Scorecards supply-chain security#1944:Commit83c5029pushedbyglours
  main

  Nov 9, 202644s
  More actions for workflow run 1944

• build(deps): bump go.yaml.in/yaml/v4 to v4.0.0

  completed successfully:
  Scorecards supply-chain security#1943:Commit95bbca7pushedbyglours
  main

  Nov 5, 202656s
  More actions for workflow run 1943

• fix(oci): put back only a complete entry when the replacement of a ca…

  completed successfully:
  Scorecards supply-chain security#1942:Commit2fcf79bpushedbyndeloof
  main

  Nov 5, 202652s
  More actions for workflow run 1942

• fix(compose): report network and volume progress once, on their own row

  completed successfully:
  Scorecards supply-chain security#1941:Commit32820e8pushedbyndeloof
  main

  Nov 5, 20261m 25s
  More actions for workflow run 1941

• refactor(compose): move the dependency graph to internal/depgraph

  completed successfully:
  Scorecards supply-chain security#1940:Commitd2582e9pushedbyglours
  main

  Nov 5, 202643s
  More actions for workflow run 1940

• fix(down): select images before teardown

  completed successfully:
  Scorecards supply-chain security#1939:Commitb513526pushedbyglours
  main

  Nov 5, 202651s
  More actions for workflow run 1939

• Scorecards supply-chain security

  completed successfully:
  Scorecards supply-chain security#1938:Scheduled
  main

  Nov 5, 202650s
  More actions for workflow run 1938

• fix(run): warn about ignored uid/gid/mode for a run target scaled to …

  completed successfully:
  Scorecards supply-chain security#1937:Commit7818712pushedbyglours
  main

  Nov 5, 202649s
  More actions for workflow run 1937

• build(deps): bump github.com/docker/cli

  completed successfully:
  Scorecards supply-chain security#1936:Commitfed7345pushedbyglours
  main

  Nov 4, 20261m 2s
  More actions for workflow run 1936

• test(images): pin the images backend adapter, and fix comments left b…

  completed successfully:
  Scorecards supply-chain security#1935:Commit514aad0pushedbyglours
  main

  Nov 4, 20261m 7s
  More actions for workflow run 1935