All pull requests

Pull requests

• 🐛 Report unknown branch protection as not available

  #5455·yuminn-k opened Nov 9, 2026·2 tasks done·

  ·
  1

  1

• 🐛 Populate GitLab release assets from asset links

  #5454·vishnums2k5 opened Nov 9, 2026Contributor·2 tasks done·

  ·
  1

• 🐛 Use filepath.Join for GitLab flattened CI path on Windows

  #5453·vishnums2k5 opened Nov 9, 2026Contributor·2 tasks done·

  ·
  3

• ✨ Detect Packagist publishing in the Packaging check

  #5448·jorgsowa opened Nov 8, 2026·2 tasks done·

  ·
  1

• 🐛 : fix(tests): skip symlink tests when privileges are not held on Windows

  #5446·Amankumar-10012004 opened Nov 7, 2026·2 tasks done·

  ·
  1

• 🐛 fix(cmd): append .exe extension to test binary on Windows in TestMCPStdioIntegration

  #5445·Amankumar-10012004 opened Nov 7, 2026·2 tasks done·

  ·
  1

• 🐛 fix(pkg/scorecard): normalize schema file paths for cross-platform JSON validation

  #5444·Amankumar-10012004 opened Nov 7, 2026·2 tasks done·

  ·
  1

• 🐛 fix(clients/localdir): use filepath to handle cross-platform path separators

  #5443·Amankumar-10012004 opened Nov 7, 2026·3 tasks done·

  ·
  2

• 🐛 fix(clients): ensure tarball readers and temp files are closed

  #5442·Amankumar-10012004 opened Nov 7, 2026·

  ·
  2

• 🌱 Add highest-impact fixes summary line to default output

  #5431·lasomethingsomething opened Nov 6, 2026Contributor·2 tasks done·

  ·
  1

• ✨ Support new SLSA tooling in Signed-Releases and permissions (#5412)

  #5429·Daniel-park10 opened Nov 6, 2026·2 tasks done·

  ·
  1

  1

• ✨ checks/cii: inherit badge from sibling repo via README project ID

  #5426·Aastha-spec-tech opened Nov 6, 2026·2 tasks done·

  ·
  1

  2

• 🌱 cii: add project ID lookup and ownership verification

  #5424·Aastha-spec-tech opened Nov 6, 2026·

  ·
  1

• 🌱 finding: use gofuzz build tag to select probe definition source

  #5423·Aastha-spec-tech opened Nov 6, 2026·

  ·
  1

  1

• 🐛 localdir: list a symlink only when it resolves to a readable file

  #5422·justaugustus opened Nov 6, 2026Member·2 tasks done·

  ·
  1

• 🌱 Share experimental check classification with the MCP catalog

  #5421·Muneer320 opened Nov 5, 2026·2 tasks done·

  ·
  1

  1

• 🐛 fix(mcp): verify pinned result commits

  #5420·areeebs opened Nov 5, 2026·1 task done·

  ·
  1

  1

• 🐛 fix(mcp): validate repository references

  #5419·areeebs opened Nov 5, 2026·1 task done·

  ·
  1

  1

• 🐛 fix(mcp): return result coverage from check tool

  #5418·areeebs opened Nov 5, 2026·1 task done·

  ·
  1

  1

• 🐛 fix(branch-protection): recognize SHA-1 and SHA-256 release targets

  #5417·areeebs opened Nov 5, 2026·

  ·
  1

  1

• 🐛 fix(gitlab): set TargetCommitish to commit SHA instead of commit URL path

  #5410·patelshivani2283-lab opened Nov 3, 2026·

  ·
  1

• ✨ Add remediation tip for unpinned pip install commands

  #5401·Sanilas-ai opened Nov 2, 2026·2 tasks done·

  ·
  1

• 🐛 Use asset download URL for GitHub release assets

  #5400·vishnums2k5 opened Nov 1, 2026Contributor·2 tasks done·

  ·
  1

• 🐛 fix(branchprotection): support uppercase and sha256 commit hashes in …

  #5399·patelshivani2283-lab opened Nov 1, 2026·2 tasks·

  ·

• 🐛 fix(dangerous-workflow): flag untrusted workflow_run context fields

  #5397·patelshivani2283-lab opened Nov 1, 2026·2 tasks done·

  ·
  1