All pull requests

Pull requests

• 🐛 Account for redundant repository ruleset bypasses

  #5295·royy92 opened Oct 5, 2026·2 tasks done·

  ·

• 🌱 Bump github.com/moby/buildkit from 0.26.3 to 0.33.1

  dependenciesgo
  #5293·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• 🐛 Correctly group OSV vulnerability aliases

  #5290·royy92 opened Oct 4, 2026·2 tasks done·

  ·

• ✨ detect Helm chart publishing workflows in Packaging check

  #5289·purisev opened Oct 4, 2026·2 tasks done·

  ·
  1

• 🐛 Fix line numbers for inline run steps in workflows

  #5286·Anandb71 opened Oct 4, 2026·2 tasks done·

  ·
  1

• ✨ Check npm lockfile dependency pinning

  #5285·royy92 opened Oct 3, 2026·2 tasks done·

  ·

• 🌱 Bump chainguard/static from 5e9c881 to fe55470

  dependenciesdocker
  #5283·dependabot[bot] opened Oct 2, 2026Bot·

  ·

• Add forkee name to regex patterns

  #5282·Rashmibhandari-alt opened Oct 2, 2026·

  ·
  1

• ✨ Branch-Protection: treat GitHub merge queue rule as requiring up-to-date branches

  #5281·osterman opened Oct 2, 2026·2 tasks done·

  ·
  1

  2

• 🌱 Bump github.com/prometheus/prometheus from 0.54.0 to 0.305.2

  #5277·justaugustus opened Oct 1, 2026Member·

  ·
  1

• 🌱 Bump github.com/google/ko from 0.18.1 to 0.19.1 in /tools

  dependenciesgo
  #5276·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• 🌱 Bump github.com/goreleaser/goreleaser/v2 from 2.12.2 to 2.18.2 in /tools

  dependenciesgo
  #5275·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• 🌱 Bump github.com/google/osv-scanner/v2 from 2.3.2 to 2.6.0

  dependenciesgo
  #5264·dependabot[bot] opened Oct 1, 2026Bot·

  ·
  1

• ✨ Add --skip-errors option to continue scans on check/probe failures

  #5256·jimjag opened Sep 30, 2026·2 tasks done·

  ·
  1

• 🌱 ci: propagate retry command failures

  #5252·bIackr0se opened Sep 27, 2026·

  ·
  1

• ✨ checks/dangerous_workflow: detect committer.{name,email} as untrusted input

  #5250·Shxnque opened Sep 26, 2026·

  ·
  2

• ✨ Treat GitHub Actions pinned to immutable releases as pinned dependencies

  #5248·jessehouwing opened Sep 22, 2026·2 tasks done·

  ·
  7

• ✨ Adds support for Actions lock files to detect pinning

  #5247·jessehouwing opened Sep 22, 2026·2 tasks done·

  ·
  1

• 🐛 Do not report a pinned URL fetched through process substitution

  #5245·arpitjain099 opened Sep 19, 2026·

  ·

• 🐛 scope packages permission exemption

  Stale
  #5243·ECD5A opened Sep 17, 2026·

  ·
  1

  1

• 🐛 Code-Review: don't treat a Prow label as approval for self-merged PRs

  #5239·askalf opened Sep 14, 2026·

  ·
  1

  2

• 🌱 test Security-Policy without policy files

  Stale
  #5238·lolcubaba31 opened Sep 14, 2026·

  ·
  1

  1

• 🐛 Detect curl downloads written with -o or -O

  Stale
  #5235·arpitjain099 opened Sep 11, 2026·

  ·
  1

• 🐛 Avoid reading non-shell files in full for Pinned-Dependencies

  Stale
  #5230·TameTheGame opened Sep 10, 2026·2 tasks done·

  ·
  1

• 🐛 detect untrusted workflow expressions in index and re-cased forms

  #5229·Sahana2524 opened Sep 9, 2026Contributor·2 tasks done·

  ·
  3