-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[Capability] Add GitLab CI dependency determinism support
enhancementNew feature or requestNew feature or requestpriority:mediumMedium-priority remediationMedium-priority remediationrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.[Security/Capability] Add JVM wrapper bootstrap checksum rules
enhancementNew feature or requestNew feature or requestpriority:mediumMedium-priority remediationMedium-priority remediationrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releasesecuritySecurity hardening, vulnerability, or supply-chain workSecurity hardening, vulnerability, or supply-chain workStatus: Open.[Efficiency] Add bounded concurrency, remote-validation concurrency, and companion parser caching
enhancementNew feature or requestNew feature or requestpriority:mediumMedium-priority remediationMedium-priority remediationrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.[Security/Efficiency] Add scanner resource limits and skipped-file diagnostics
enhancementNew feature or requestNew feature or requestpriority:mediumMedium-priority remediationMedium-priority remediationrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releasesecuritySecurity hardening, vulnerability, or supply-chain workSecurity hardening, vulnerability, or supply-chain workStatus: Open.[Supply chain] Publish release SBOM and provenance attestations for the packaged action
enhancementNew feature or requestNew feature or requestpriority:mediumMedium-priority remediationMedium-priority remediationrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releasesecuritySecurity hardening, vulnerability, or supply-chain workSecurity hardening, vulnerability, or supply-chain workStatus: Open.Add Kubernetes and Helm manifest support
enhancementNew feature or requestNew feature or requestrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.Add Elixir Mix ecosystem support
enhancementNew feature or requestNew feature or requestrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.Add Dart and Flutter Pub ecosystem support
enhancementNew feature or requestNew feature or requestrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.Add Swift Package Manager ecosystem support
enhancementNew feature or requestNew feature or requestrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.Add PHP Composer ecosystem support
enhancementNew feature or requestNew feature or requestrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.Add .NET NuGet ecosystem support
enhancementNew feature or requestNew feature or requestrelease:minorCandidate for a backwards-compatible v1.x minor releaseCandidate for a backwards-compatible v1.x minor releaseStatus: Open.[Supply chain] Re-check Maintained Scorecard alert after repository age threshold
priority:lowLow-priority remediationLow-priority remediationsecuritySecurity hardening, vulnerability, or supply-chain workSecurity hardening, vulnerability, or supply-chain workStatus: Open.