Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(gha)(deps): bump the github-actions group across 1 directory with 9 updates #225

Merged
merged 1 commit into from
Dec 10, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2024

Bumps the github-actions group with 9 updates in the / directory:

Package From To
actions/checkout 4.2.0 4.2.2
actions/setup-python 5.2.0 5.3.0
github/codeql-action 3.26.10 3.27.5
actions/dependency-review-action 4.3.4 4.5.0
codelytv/pr-size-labeler 1.10.1 1.10.2
oxsecurity/megalinter 8.0.0 8.3.0
actions/upload-artifact 4.4.0 4.4.3
actions/cache 4.0.2 4.1.2
fsfe/reuse-action 4.0.0 5.0.0

Updates actions/checkout from 4.2.0 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates actions/setup-python from 5.2.0 to 5.3.0

Release notes

Sourced from actions/setup-python's releases.

v5.3.0

What's Changed

Bug Fixes:

Enhancements:

New Contributors

Full Changelog: actions/setup-python@v5...v5.3.0

Commits

Updates github/codeql-action from 3.26.10 to 3.27.5

Release notes

Sourced from github/codeql-action's releases.

v3.27.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.5 - 19 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024

  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

No user facing changes.

3.27.5 - 19 Nov 2024

No user facing changes.

3.27.4 - 14 Nov 2024

No user facing changes.

3.27.3 - 12 Nov 2024

No user facing changes.

3.27.2 - 12 Nov 2024

  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

3.27.1 - 08 Nov 2024

  • The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
  • Update default CodeQL bundle version to 2.19.3. #2576

3.27.0 - 22 Oct 2024

  • Bump the minimum CodeQL bundle version to 2.14.6. #2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
  • Update default CodeQL bundle version to 2.19.2. #2552

3.26.13 - 14 Oct 2024

No user facing changes.

3.26.12 - 07 Oct 2024

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520

    • If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.

    • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.26.11 and github/codeql-action/*@v2 by github/codeql-action/*@v2.26.11 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

3.26.11 - 03 Oct 2024

... (truncated)

Commits
  • f09c1c0 Merge pull request #2616 from github/update-v3.27.5-a6c8729a5
  • 67b73ea Update changelog for v3.27.5
  • a6c8729 Merge pull request #2614 from github/marcogario/per-platform-proxy
  • 8f3b487 Start-proxy: Fetch OS specific binary
  • cba5fb5 Merge pull request #2613 from github/dependabot/npm_and_yarn/npm_and_yarn-018...
  • e782c3a Merge pull request #2612 from github/angelapwen/report-linux-runner-release
  • db67881 Update checked-in dependencies
  • ecde4d2 Bump cross-spawn from 7.0.3 to 7.0.6 in the npm_and_yarn group
  • e3c67a0 Merge pull request #2610 from github/dependabot/npm_and_yarn/npm-d2ca52e617
  • f9ada54 Telemetry: report OS release for GitHub-hosted Linux runners
  • Additional commits viewable in compare view

Updates actions/dependency-review-action from 4.3.4 to 4.5.0

Release notes

Sourced from actions/dependency-review-action's releases.

v4.5.0

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4...v4.5.0

v4.4.0

What's Changed

Full Changelog: actions/dependency-review-action@v4.3.5...v4.4.0

v4.3.5

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.3.4...v4.3.5

Commits
  • 3b139cf Merge pull request #851 from actions/ahmed3lmallah/prepare-for-4.5.0-release
  • d6807b6 updating generated code
  • c89b41f addressing lint issues
  • eee97d8 incrementing project version
  • 9d10182 Merge pull request #827 from ebickle/fix/comment-warn-only
  • 9192be9 Merge pull request #850 from actions/ahmed3lmallah/adressing-CVE-2024-21538
  • 2fc8e23 Using cross-spawn safe version
  • fb86db2 fix: resolve race conditions in async core.group calls
  • 0a198ab fix: replace integer failureCount with boolean
  • fc499fc Merge branch 'main' into fix/comment-warn-only
  • Additional commits viewable in compare view

Updates codelytv/pr-size-labeler from 1.10.1 to 1.10.2

Release notes

Sourced from codelytv/pr-size-labeler's releases.

Bug fixes for max PR comments

What's Changed

New Contributors

Full Changelog: CodelyTV/pr-size-labeler@v1.10.1...v1.11.0

Commits

Updates oxsecurity/megalinter from 8.0.0 to 8.3.0

Release notes

Sourced from oxsecurity/megalinter's releases.

v8.3.0

What's Changed

  • Core

    • Display command log (truncated to 250 chars) even when LOG_LEVEL is not DEBUG
    • Allow to replace an ENV var value with the value of another ENV var before calling a PRE_COMMAND (helps for tflint run from GitHub Enterprise)
    • Fix handling of git submodule paths
  • Fixes

    • trivy: retry in case of BLOB_UNKNOWN while downloading vulnerability list
  • Reporters

    • Fix UpdatedSourcesReporter when APPLY_FIXES is list (array)
    • Fix AzureCommentReporter when the repo is not found: fallback using BUILD_REPOSITORY_ID. (+ disable space replacement in repo name with AZURE_COMMENT_REPORTER_REPLACE_WITH_SPACES: false)
  • CI

    • Fix Docker mirroring job for release context
    • Remove max parallel jobs for release linters workflow
  • Linter versions upgrades (13)

MegaLinter is graciously provided by OX Security

Please share the LinkedIn Post

Full Changelog: oxsecurity/megalinter@v8.2.0...v8.3.0

v8.2.0

What's Changed

... (truncated)

Changelog

Sourced from oxsecurity/megalinter's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

  • Core

  • New linters

  • Media

  • Linters enhancements

  • Fixes

  • Reporters

  • Doc

  • Flavors

  • CI

  • mega-linter-runner

  • Linter versions upgrades (N)

    • checkov from 3.2.311 to 3.2.312 on 2024-11-24
    • terragrunt from 0.68.14 to 0.69.1 on 2024-11-24
    • php-cs-fixer from 3.64.0 to 3.65.0 on 2024-11-25
    • checkov from 3.2.312 to 3.2.314 on 2024-11-25
    • golangci-lint from 1.62.0 to 1.62.2 on 2024-11-25
    • prettier from 3.3.3 to 3.4.0 on 2024-11-26
    • swiftlint from 0.57.0 to 0.57.1 on 2024-11-26
    • prettier from 3.4.0 to 3.4.1 on 2024-11-26
    • checkov from 3.2.314 to 3.2.317 on 2024-11-26
    • rubocop from 1.68.0 to 1.69.0 on 2024-11-26
    • cfn-lint from 1.20.0 to 1.20.1 on 2024-11-27
    • bandit from 1.7.10 to 1.8.0 on 2024-11-27
    • cspell from 8.16.0 to 8.16.1 on 2024-11-27
    • checkov from 3.2.317 to 3.2.320 on 2024-11-27
    • snakemake from 8.25.3 to 8.25.4 on 2024-11-27
    • stylelint from 16.10.0 to 16.11.0 on 2024-11-29
    • djlint from 1.36.1 to 1.36.3 on 2024-11-29
    • phpstan from 2.0.2 to 2.0.3 on 2024-11-29
    • ruff from 0.8.0 to 0.8.1 on 2024-11-29

... (truncated)

Commits
  • 1fc052d Release MegaLinter v8.3.0
  • e8a20cd [automation] Auto-update linters version, help and documentation (#4304)
  • 9824f37 Fix Docker mirroring job for release context (#4303)
  • 9cb4ec7 [automation] Auto-update linters version, help and documentation (#4299)
  • 010c8bd chore(deps): update dependency sfdx-hardis to v5.7.1 (#4302)
  • 1a219e1 chore(deps): update trufflesecurity/trufflehog docker tag to v3.84.1 (#4301)
  • 09ab582 Env variable replacement for PRE_COMMIT + command in log (#4298)
  • e33c1c7 retry in case of BLOB_UNKNOWN while downloading vulnerability list (#4300)
  • 7f790c0 [automation] Auto-update linters version, help and documentation (#4297)
  • 797a3d1 [automation] Auto-update linters version, help and documentation (#4296)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4.4.0 to 4.4.3

Release notes

Sourced from actions/upload-artifact's releases.

v4.4.3

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

What's Changed

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

Commits
  • b4b15b8 Merge pull request #632 from actions/joshmgross/undo-dependency-changes
  • 92b01eb Undo indirect dependency updates from #627
  • 8448086 Merge pull request #627 from actions/robherley/v4.4.2
  • b1d4642 add explicit relative and absolute symlinks to workflow
  • d50e660 bump version
  • aabe6f8 build with @​actions/artifact v2.1.11
  • 604373d Merge pull request #625 from actions/robherley/artifact-2.1.10
  • 0150148 paste right core version
  • a009b25 update licenses
  • 9f6f6f4 update @​actions/core and @​actions/artifact to latest versions
  • Additional commits viewable in compare view

Updates actions/cache from 4.0.2 to 4.1.2

Release notes

Sourced from actions/cache's releases.

v4.1.2

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.1.2

v4.1.1

What's Changed

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

What's Changed

New Contributors

Full Changelog: actions/cache@v4.0.2...v4.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

4.1.2

  • Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474
  • Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

  • Restore original behavior of cache-hit output - #1467

4.1.0

  • Ensure cache-hit output is set when a cache is missed - #1404
  • Deprecate save-always input - #1452

4.0.2

  • Fixed restore fail-on-cache-miss not working.

4.0.1

  • Updated isGhes check

4.0.0

  • Updated minimum runner version support from node 12 -> node 20

3.3.3

  • Updates @​actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378
  • Additional audit fixes of npm package(s)

3.3.2

  • Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

  • Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

  • Added option to lookup cache without downloading it.

3.2.6

  • Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

... (truncated)

Commits
  • 6849a64 Release 4.1.2 #1477
  • 5a1720c Merge branch 'Link-/prep-4.1.2' of https://github.com/actions/cache into Link...
  • d9fef48 Merge branch 'main' into Link-/prep-4.1.2
  • a50e8d0 Merge branch 'main' into Link-/prep-4.1.2
  • acc9ae5 Merge pull request #1481 from actions/dependabot/github_actions/actions/setup...
  • 1ea5f18 Merge branch 'main' into Link-/prep-4.1.2
  • cc679ff Merge branch 'main' into dependabot/github_actions/actions/setup-node-4
  • 366d43d Merge pull request #1483 from actions/dependabot/github_actions/github/codeql...
  • 02bf319 Bump github/codeql-action from 2 to 3
  • 6f6220b Merge branch 'main' into dependabot/github_actions/actions/setup-node-4
  • Additional commits viewable in compare view

Updates fsfe/reuse-action from 4.0.0 to 5.0.0

Commits
  • bb774aa Merge pull request #35 from carmenbianca/bump-v5
  • b8e23e7 Bump to v5
  • 37c9187 Merge pull request #33 from AndyScherzinger/chore/noid/toml-v4-doc-updates
  • b2cec8e docs: Update examples to use v4 and remove dep5 definition
  • f15b48b Merge pull request #34 from bernhardreiter/patch-1
  • 618b8e9 Update README.md for new major version of action @​v3 -> @​v4
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remov...

Description has been truncated

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
… 9 updates

Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.0` | `4.2.2` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.2.0` | `5.3.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.26.10` | `3.27.5` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.3.4` | `4.5.0` |
| [codelytv/pr-size-labeler](https://github.com/codelytv/pr-size-labeler) | `1.10.1` | `1.10.2` |
| [oxsecurity/megalinter](https://github.com/oxsecurity/megalinter) | `8.0.0` | `8.3.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.4.0` | `4.4.3` |
| [actions/cache](https://github.com/actions/cache) | `4.0.2` | `4.1.2` |
| [fsfe/reuse-action](https://github.com/fsfe/reuse-action) | `4.0.0` | `5.0.0` |



Updates `actions/checkout` from 4.2.0 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@d632683...11bd719)

Updates `actions/setup-python` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@f677139...0b93645)

Updates `github/codeql-action` from 3.26.10 to 3.27.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@e2b3eaf...f09c1c0)

Updates `actions/dependency-review-action` from 4.3.4 to 4.5.0
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@5a2ce3f...3b139cf)

Updates `codelytv/pr-size-labeler` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/codelytv/pr-size-labeler/releases)
- [Commits](CodelyTV/pr-size-labeler@c7a55a0...1c34223)

Updates `oxsecurity/megalinter` from 8.0.0 to 8.3.0
- [Release notes](https://github.com/oxsecurity/megalinter/releases)
- [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md)
- [Commits](oxsecurity/megalinter@c217fe8...1fc052d)

Updates `actions/upload-artifact` from 4.4.0 to 4.4.3
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5076954...b4b15b8)

Updates `actions/cache` from 4.0.2 to 4.1.2
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0c45773...6849a64)

Updates `fsfe/reuse-action` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/fsfe/reuse-action/releases)
- [Commits](fsfe/reuse-action@3ae3c6b...bb774aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: codelytv/pr-size-labeler
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: oxsecurity/megalinter
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: fsfe/reuse-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from jmuelbert as a code owner December 1, 2024 10:57
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 1, 2024
Copy link

trunk-io bot commented Dec 1, 2024

Merging to main in this repository is managed by Trunk.

  • To merge this pull request, check the box to the left or comment /trunk merge below.

Copy link

github-actions bot commented Dec 1, 2024

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/reuse-check.yml

PackageVersionLicenseIssue Type
fsfe/reuse-actionbb774aa972c2a89ff34781233d275075cbddf542NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/setup-python 0b93645e9fea7318ecaed2b359559ac225c90a2b 🟢 5.8
Details
CheckScoreReason
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
SAST🟢 8SAST tool is not run on all commits -- score normalized to 8
Vulnerabilities⚠️ 014 existing vulnerabilities detected
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/github/codeql-action/upload-sarif f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/github/codeql-action/analyze f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/github/codeql-action/autobuild f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/github/codeql-action/init f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/dependency-review-action 3b139cfc5fae8b618d3eae3675e383bb1769c019 🟢 7.2
Details
CheckScoreReason
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 9security policy file detected
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 100 existing vulnerabilities detected
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/github/codeql-action/upload-sarif f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/codelytv/pr-size-labeler 1c3422395d899286d5ee2c809fd5aed264d5eb9b UnknownUnknown
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/upload-artifact b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 🟢 7.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 10all changesets reviewed
Maintained🟢 1017 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 91 existing vulnerabilities detected
actions/oxsecurity/megalinter 1fc052d03c7a43c78fe0fee19c9d648b749e0c01 🟢 3.8
Details
CheckScoreReason
Code-Review🟢 3Found 6/19 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
actions/actions/cache 6849a6489940f00c2f30c0fb92c6274307ccb58a 🟢 7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/setup-python 0b93645e9fea7318ecaed2b359559ac225c90a2b 🟢 5.8
Details
CheckScoreReason
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
SAST🟢 8SAST tool is not run on all commits -- score normalized to 8
Vulnerabilities⚠️ 014 existing vulnerabilities detected
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/github/codeql-action/upload-sarif f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/fsfe/reuse-action bb774aa972c2a89ff34781233d275075cbddf542 🟢 4
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 34 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
Code-Review🟢 3Found 5/15 approved changesets -- score normalized to 3
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/upload-artifact b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 🟢 7.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 10all changesets reviewed
Maintained🟢 1017 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 91 existing vulnerabilities detected
actions/github/codeql-action/upload-sarif f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/github/codeql-action/upload-sarif f09c1c0a94de965c15400f5634aa42fac8fb8f88 UnknownUnknown
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
actions/actions/setup-python 0b93645e9fea7318ecaed2b359559ac225c90a2b 🟢 5.8
Details
CheckScoreReason
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
SAST🟢 8SAST tool is not run on all commits -- score normalized to 8
Vulnerabilities⚠️ 014 existing vulnerabilities detected
actions/actions/upload-artifact b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 🟢 7.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 10all changesets reviewed
Maintained🟢 1017 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 91 existing vulnerabilities detected
actions/actions/checkout 11bd71901bbe5b1630ceea73d27597364c9af683 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1013 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected

Scanned Files

  • .github/workflows/ci.yml
  • .github/workflows/codacy-analysis.yml
  • .github/workflows/codeql-analysis.yml
  • .github/workflows/commitlint.yml
  • .github/workflows/dependency-review.yml
  • .github/workflows/devskim-analysis.yml
  • .github/workflows/labeler.yml
  • .github/workflows/mega-linter.yml
  • .github/workflows/mkdocs-pages.yml
  • .github/workflows/ossar-analysis.yml
  • .github/workflows/pr-lint.yaml
  • .github/workflows/reuse-check.yml
  • .github/workflows/scorecard.yml
  • .github/workflows/semgrep.yml
  • .github/workflows/test.yml
  • .github/workflows/write-good.yml

Copy link

github-actions bot commented Dec 1, 2024

Here are some friendly prose warnings from write-good:

In ./SECURITY.md
=============
 the moment checkconnect only considers the very latest commit to be
                         ^^^^
"only" can weaken meaning on line 5 at column 27
-------------
nnect only considers the very latest commit to be
                         ^^^^
"very" is a weasel word and can weaken meaning on line 5 at column 46
-------------
he very latest commit to be
                         ^^^^^^^^^^^^
"be
supported" may be passive voice on line 5 at column 68
-------------
automated updates to minimize the time between vulnerability publication
                     ^^^^^^^^
"minimize" is wordy or unneeded on line 7 at column 21
-------------
In the near future we will introduce versioning, so expect this section to
^^^^^^^^^^^^^^^^^^
"In the near future" is wordy or unneeded on line 15 at column 0


In ./docs/about/EUPL-1.2.md
=============
(as defined below) which is provided under the
                         ^^^^^^^^^^^
"is provided" may be passive voice on line 4 at column 93
-------------
rised under this Licence is prohibited (to the extent such
                         ^^^^^^^^^^^^^
"is prohibited" may be passive voice on line 5 at column 88
-------------
use is covered by a right of the copyright holder of the Work).
    ^^^^^^^^^^
"is covered" may be passive voice on line 6 at column 4
-------------
The Work is provided under the terms of this Licence when the Licensor (as defin
         ^^^^^^^^^^^
"is provided" may be passive voice on line 7 at column 9
-------------
notice immediately following the copyright notice for the Work:
       ^^^^^^^^^^^
"immediately" can weaken meaning on line 8 at column 7
-------------
s or software that could be created by the Licensee, based upon the Original Wor
                         ^^^^^^^^^^
"be created" may be passive voice on line 18 at column 54
-------------
required in order to classify a work as a Derivative Work; this extent is determ
         ^^^^^^^^^^^
"in order to" is wordy or unneeded on line 20 at column 9
-------------
vative Work; this extent is determined by copyright law applicable in
                         ^^^^^^^^^^^^^
"is determined" may be passive voice on line 20 at column 71
-------------
modify.
^^^^^^
"modify" is wordy or unneeded on line 24 at column 0
-------------
code which has generally been compiled and which is meant to be interpreted by
                         ^^^^^^^^^^^^^
"been compiled" may be passive voice on line 25 at column 53
-------------
 been compiled and which is meant to be interpreted by
                         ^^^^^^^^
"is meant" may be passive voice on line 25 at column 77
-------------
ed and which is meant to be interpreted by
                         ^^^^^^^^^^^^^^
"be interpreted" may be passive voice on line 25 at column 89
-------------
nce to do the following, for
                         ^^^^^^^^^^^^^^^^^^^
"for
the duration of" is wordy or unneeded on line 37 at column 116
-------------
* modify the Work, and make Derivative Works based upon the Work,
  ^^^^^^
"modify" is wordy or unneeded on line 42 at column 2
-------------
Those rights can be exercised on any media, supports and formats, whether now kn
                 ^^^^^^^^^^^^
"be exercised" may be passive voice on line 49 at column 17
-------------
by law in order to make effective the licence of the economic rights here above 
       ^^^^^^^^^^^
"in order to" is wordy or unneeded on line 52 at column 7
-------------
utable Code. If the Work is provided as
                         ^^^^^^^^^^^
"is provided" may be passive voice on line 57 at column 101
-------------
e, the Licensor provides in addition a machine-readable copy of the Source Code 
                         ^^^^^^^^^^^
"in addition" is wordy or unneeded on line 58 at column 39
-------------
where the Source Code is easily and freely accessible for as long as the Licenso
                         ^^^^^^
"easily" can weaken meaning on line 60 at column 48
-------------
Nothing in this Licence is intended to deprive the Licensee of the benefits from
                        ^^^^^^^^^^^
"is intended" may be passive voice on line 64 at column 24
-------------
on right:** The Licensee shall keep intact all copyright, patent or trademarks n
                         ^^^^^
"shall" is wordy or unneeded on line 72 at column 36
-------------
tating that the Work has been modified and the date of modification.
                         ^^^^^^^^^^^^^
"been modified" may be passive voice on line 75 at column 53
-------------
on or Communication will be done under the terms of this Licence or of a later v
                         ^^^^^^^
"be done" may be passive voice on line 78 at column 35
-------------
is expressly distributed only under this version of the Licence — for example by
                         ^^^^
"only" can weaken meaning on line 79 at column 43
-------------
�EUPL v. 1.2 only’. The Licensee (becoming Licensor) cannot offer or impose any 
             ^^^^
"only" can weaken meaning on line 80 at column 13
-------------
nnot offer or impose any additional terms or conditions on the
                         ^^^^^^^^^^
"additional" is wordy or unneeded on line 80 at column 80
-------------
ion or Communication can be done
                         ^^^^^^^
"be done" may be passive voice on line 84 at column 102
-------------
f the Compatible Licence shall prevail.
                         ^^^^^
"shall" is wordy or unneeded on line 87 at column 82
-------------
py of the Source Code or indicate a repository where this Source will be easily 
                         ^^^^^^^^
"indicate" is wordy or unneeded on line 90 at column 46
-------------
here this Source will be easily and freely available
                         ^^^^^^
"easily" can weaken meaning on line 90 at column 94
-------------
l Work granted hereunder is owned by him/her or
                         ^^^^^^^^
"is owned" may be passive voice on line 98 at column 89
-------------
e/she brings to the Work are owned by him/her or
                         ^^^^^^^^^
"are owned" may be passive voice on line 100 at column 92
-------------
he original Licensor and subsequent Contributors grant You a licence to their co
                         ^^^^^^^^^^
"subsequent" is wordy or unneeded on line 102 at column 60
-------------
continuously improved by numerous Contributors. It is not a finished work
                         ^^^^^^^^
"numerous" is wordy or unneeded on line 106 at column 66
-------------
y numerous Contributors. It is not a finished work
                         ^^^^^
"It is" is wordy or unneeded on line 106 at column 89
-------------
and may therefore contain defects or ‘bugs’ inherent to this type of development
        ^^^^^^^^^
"therefore" is wordy or unneeded on line 107 at column 8
-------------
 ‘bugs’ inherent to this type of development.
                         ^^^^^^^
"type of" is wordy or unneeded on line 107 at column 61
-------------
e above reason, the Work is provided under the Licence on an ‘as is’ basis and w
                         ^^^^^^^^^^^
"is provided" may be passive voice on line 108 at column 31
-------------
concerning the Work, including without limitation merchantability, fitness for a
^^^^^^^^^^
"concerning" is wordy or unneeded on line 109 at column 0
-------------
even if the Licensor has been advised of the possibility of such damage. However
                         ^^^^^^^^^^^^
"been advised" may be passive voice on line 118 at column 59
-------------
sibility of such damage. However,
                         ^^^^^^^
"However" is wordy or unneeded on line 118 at column 107
-------------
## 9.Additional agreements
     ^^^^^^^^^^
"Additional" is wordy or unneeded on line 121 at column 5
-------------
ay choose to conclude an additional agreement, defining obligations or services
                         ^^^^^^^^^^
"additional" is wordy or unneeded on line 122 at column 59
-------------
stent with this Licence. However, if accepting obligations, You may act only on 
                         ^^^^^^^
"However" is wordy or unneeded on line 123 at column 30
-------------
obligations, You may act only on your own behalf and on your sole
                         ^^^^
"only" can weaken meaning on line 123 at column 77
-------------
y other Contributor, and only if You agree to indemnify,
                         ^^^^
"only" can weaken meaning on line 124 at column 85
-------------
accepted any warranty or additional liability.
                         ^^^^^^^^^^
"additional" is wordy or unneeded on line 126 at column 43
-------------
ions of this Licence can be accepted by clicking on an icon ‘I agree’ placed und
                         ^^^^^^^^^^^
"be accepted" may be passive voice on line 129 at column 35
-------------
n any other similar way, in accordance with the rules of
                         ^^^^^^^^^^^^^^^^^^
"in accordance with" is wordy or unneeded on line 130 at column 86
-------------
ance of this Licence and all of its terms
                         ^^^^^^
"all of" is wordy or unneeded on line 131 at column 106
-------------
 accept this Licence and all of its terms and conditions by exercising any right
                         ^^^^^^
"all of" is wordy or unneeded on line 133 at column 51
-------------
ommunication of the Work by means of electronic communication by You (for exampl
                         ^^^^^^^^^^^
"by means of" is wordy or unneeded on line 138 at column 57
-------------
ed by the applicable law regarding the Licensor, the Licence
                         ^^^^^^^^^
"regarding" is wordy or unneeded on line 140 at column 84
-------------
s granted hereunder will terminate automatically upon any breach by the Licensee
                         ^^^^^^^^^
"terminate" is wordy or unneeded on line 144 at column 50
-------------
h a termination will not terminate the licences of any person who has received t
                         ^^^^^^^^^
"terminate" is wordy or unneeded on line 146 at column 28
-------------
ment between the Parties as to the
                         ^^^^^
"as to" is wordy or unneeded on line 150 at column 104
-------------
ole. Such provision will be construed or reformed so as necessary to make it val
                         ^^^^^^^^^^^^
"be construed" may be passive voice on line 153 at column 62
-------------
he Appendix, so far this is required and reasonable, without reducing the scope 
                         ^^^^^^^^^^^
"is required" may be passive voice on line 156 at column 26
-------------
ions of the Licence will be published with a unique version number.
                         ^^^^^^^^^^^^
"be published" may be passive voice on line 157 at column 33
-------------
* this Licence shall be governed by the law of the European Union Member State w
               ^^^^^
"shall" is wordy or unneeded on line 173 at column 15
-------------
* this Licence shall be governed by the law of the European Union Member State w
                     ^^^^^^^^^^^
"be governed" may be passive voice on line 173 at column 21
-------------
* this licence shall be governed by Belgian law if the Licensor has no seat, res
               ^^^^^
"shall" is wordy or unneeded on line 175 at column 15
-------------
* this licence shall be governed by Belgian law if the Licensor has no seat, res
                     ^^^^^^^^^^^
"be governed" may be passive voice on line 175 at column 21
-------------
he Licensor has no seat, residence or registered office inside
                         ^^^^^^^^^
"residence" is wordy or unneeded on line 175 at column 77


In ./docs/guides/install.md
=============
vailable on PyPI and can be installed with [pip](https://pip.pypa.io).
                         ^^^^^^^^^^^^
"be installed" may be passive voice on line 17 at column 42


In ./docs/index.md
=============
checkconnect is distributed under the terms of the
             ^^^^^^^^^^^^^^
"is distributed" may be passive voice on line 31 at column 13
-------------
AJOR.MINOR' versions can be chosen by using
                         ^^^^^^^^^
"be chosen" may be passive voice on line 36 at column 54
-------------
that have not yet been released.
                  ^^^^^^^^^^^^^
"been released" may be passive voice on line 38 at column 18


In ./docs/community/contributing.md
=============
Thank you for being interested in contributing to checkconnect.
              ^^^^^^^^^^^^^^^^
"being interested" may be passive voice on line 3 at column 14
-------------
There are many ways you can contribute to the project:
          ^^^^
"many" is a weasel word and can weaken meaning on line 4 at column 10
-------------
- [Implement new features](https://github.com/jmuelbert/checkconnect/issues?q=is
   ^^^^^^^^^
"Implement" is wordy or unneeded on line 7 at column 3
-------------
- Participate in discussions
  ^^^^^^^^^^^
"Participate" is wordy or unneeded on line 10 at column 2
-------------
Possible bugs may be raised as a "Potential Issue" discussion, feature requests 
                  ^^^^^^^^^
"be raised" may be passive voice on line 18 at column 18
-------------
be raised as an "Ideas" discussion. We can then determine if the discussion need
^^^^^^^^^
"be raised" may be passive voice on line 19 at column 0
-------------
to be escalated into an "Issue" or not, or if we'd consider a pull request.
   ^^^^^^^^^^^^
"be escalated" may be passive voice on line 20 at column 3
-------------
Build and validate the documentation website:
          ^^^^^^^^
"validate" is wordy or unneeded on line 106 at column 10


In ./docs/community/code_of_conduct.md
=============
- Giving and gracefully accepting constructive feedback
             ^^^^^^^^^^
"gracefully" can weaken meaning on line 22 at column 13
-------------
sing on what is best not just for us as individuals, but for the
                         ^^^^
"just" can weaken meaning on line 25 at column 31
-------------
  overall community
  ^^^^^^^
"overall" is wordy or unneeded on line 26 at column 2
-------------
t which could reasonably be considered inappropriate in a
                         ^^^^^^^^^^^^^
"be considered" may be passive voice on line 37 at column 39
-------------
nacceptable behavior may be
                         ^^^^^^^^^^^
"be
reported" may be passive voice on line 62 at column 72
-------------
il]. All complaints will be reviewed and
                         ^^^^^^^^^^^
"be reviewed" may be passive voice on line 64 at column 51
-------------
investigated promptly and fairly.
             ^^^^^^^^
"promptly" can weaken meaning on line 65 at column 13
-------------
nvestigated promptly and fairly.
                         ^^^^^^
"fairly" is a weasel word and can weaken meaning on line 65 at column 26
-------------
All community leaders are obligated to respect the privacy and security of
                      ^^^^^^^^^^^^^
"are obligated" may be passive voice on line 67 at column 22
-------------
te. A public apology may be requested.
                         ^^^^^^^^^^^^
"be requested" may be passive voice on line 83 at column 57
-------------
ing the Code of Conduct, is allowed during
                         ^^^^^^^^^^
"is allowed" may be passive voice on line 105 at column 54
-------------
This Code of Conduct is adapted from the [Contributor Covenant][homepage],
                     ^^^^^^^^^^
"is adapted" may be passive voice on line 120 at column 21
-------------
munity Impact Guidelines were inspired by
                         ^^^^^^^^^^^^^
"were inspired" may be passive voice on line 124 at column 28


In ./docs/developer/changelog.md
=============
ges to CheckConnect will be documented in this file.
                         ^^^^^^^^^^^^^
"be documented" may be passive voice on line 5 at column 41
-------------
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
           ^^^^^^^^
"is based" may be passive voice on line 7 at column 11


In ./CHANGELOG.md
=============
ges to this project will be documented in this file.
                         ^^^^^^^^^^^^^
"be documented" may be passive voice on line 3 at column 41
-------------
The format is based on
           ^^^^^^^^
"is based" may be passive voice on line 5 at column 11


In ./.github/CONTRIBUTING.md
=============
Feel free to submit early, though—we can always iterate on this.
                    ^^^^^
"early" can weaken meaning on line 65 at column 20
-------------
It is recommended to open an issue before starting work on anything.
^^^^^
"It is" is wordy or unneeded on line 67 at column 0
-------------
It is recommended to open an issue before starting work on anything.
   ^^^^^^^^^^^^^^
"is recommended" may be passive voice on line 67 at column 3
-------------
over with the owners and validate your approach.
                         ^^^^^^^^
"validate" is wordy or unneeded on line 68 at column 61
-------------
- The PR should be labelled with the kind of change (see below).
                ^^^^^^^^^^^
"be labelled" may be passive voice on line 78 at column 16
-------------
 of the merge button, if it is not shown.)
                         ^^^^^
"it is" is wordy or unneeded on line 100 at column 70
-------------
sts for the release have been merged.
                         ^^^^^^^^^^^
"been merged" may be passive voice on line 110 at column 41
-------------
Releases are made by publishing a GitHub Release.
         ^^^^^^^^
"are made" may be passive voice on line 113 at column 9
-------------
A draft release is being maintained based on merged pull requests.
                   ^^^^^^^^^^^^^^^^
"being maintained" may be passive voice on line 114 at column 19
-------------
ollowing automated steps are triggered:
                         ^^^^^^^^^^^^^
"are triggered" may be passive voice on line 126 at column 60
-------------
- The Git tag is applied to the repository.
              ^^^^^^^^^^
"is applied" may be passive voice on line 128 at column 14
-------------
<!-- github-only -->
            ^^^^
"only" can weaken meaning on line 141 at column 12


In ./.github/PULL_REQUEST_TEMPLATE.md
=============
s one or more issues, or is related to
                         ^^^^^^^^^^
"is related" may be passive voice on line 11 at column 55
-------------
## How Has This Been Tested?
                ^^^^^^^^^^^
"Been Tested" may be passive voice on line 20 at column 16
-------------
request before all these are done, but
                         ^^^^^^^^
"are done" may be passive voice on line 31 at column 51
-------------
     they should be done before getting merged. -->
                 ^^^^^^^
"be done" may be passive voice on line 32 at column 17
-------------
 If the key of a setting is changed, the 'old' attribute is updated or
                         ^^^^^^^^^^
"is changed" may be passive voice on line 34 at column 30
-------------
ged, the 'old' attribute is updated or
                         ^^^^^^^^^^
"is updated" may be passive voice on line 34 at column 62
-------------
      it is resolved in SettingsUpdater.
      ^^^^^
"it is" is wordy or unneeded on line 35 at column 6
-------------
      it is resolved in SettingsUpdater.
         ^^^^^^^^^^^
"is resolved" may be passive voice on line 35 at column 9
-------------
hanges are notable, they are documented in
                         ^^^^^^^^^^^^^^
"are documented" may be passive voice on line 38 at column 41
-------------
## Additional text
   ^^^^^^^^^^
"Additional" is wordy or unneeded on line 41 at column 3
-------------
the translations need to be updated. --->
                         ^^^^^^^^^^
"be updated" may be passive voice on line 44 at column 45


In ./.github/CODE_OF_CONDUCT.md
=============
- Giving and gracefully accepting constructive feedback
             ^^^^^^^^^^
"gracefully" can weaken meaning on line 22 at column 13
-------------
sing on what is best not just for us as individuals, but for the
                         ^^^^
"just" can weaken meaning on line 25 at column 31
-------------
  overall community
  ^^^^^^^
"overall" is wordy or unneeded on line 26 at column 2
-------------
t which could reasonably be considered inappropriate in a
                         ^^^^^^^^^^^^^
"be considered" may be passive voice on line 37 at column 39
-------------
nacceptable behavior may be
                         ^^^^^^^^^^^
"be
reported" may be passive voice on line 62 at column 72
-------------
il]. All complaints will be reviewed and
                         ^^^^^^^^^^^
"be reviewed" may be passive voice on line 64 at column 51
-------------
investigated promptly and fairly.
             ^^^^^^^^
"promptly" can weaken meaning on line 65 at column 13
-------------
nvestigated promptly and fairly.
                         ^^^^^^
"fairly" is a weasel word and can weaken meaning on line 65 at column 26
-------------
All community leaders are obligated to respect the privacy and security of
                      ^^^^^^^^^^^^^
"are obligated" may be passive voice on line 67 at column 22
-------------
te. A public apology may be requested.
                         ^^^^^^^^^^^^
"be requested" may be passive voice on line 83 at column 57
-------------
ing the Code of Conduct, is allowed during
                         ^^^^^^^^^^
"is allowed" may be passive voice on line 105 at column 54
-------------
This Code of Conduct is adapted from the [Contributor Covenant][homepage],
                     ^^^^^^^^^^
"is adapted" may be passive voice on line 120 at column 21
-------------
munity Impact Guidelines were inspired by
                         ^^^^^^^^^^^^^
"were inspired" may be passive voice on line 124 at column 28


In ./AUTHORS.md
=============
are permitted in any medium without royalty provided the copyright
^^^^^^^^^^^^^
"are permitted" may be passive voice on line 8 at column 0
-------------
notice and this notice are preserved.
                       ^^^^^^^^^^^^^
"are preserved" may be passive voice on line 9 at column 23


In ./README.md
=============
is received within a certain time, it means that the web address or the NTP
^^^^^^^^^^^
"is received" may be passive voice on line 27 at column 0
-------------
vailable. If no response is received or an error occurs, it
                         ^^^^^^^^^^^
"is received" may be passive voice on line 28 at column 36
-------------
tion][documentation-url] is made with [Material for MkDocs][mkdocs-material-url]
                         ^^^^^^^
"is made" may be passive voice on line 47 at column 39
-------------
mkdocs-material-url] and is hosted by [GitHub Pages][github-pages-doc-url].
                         ^^^^^^^^^
"is hosted" may be passive voice on line 47 at column 99
-------------
Many thanks to everyone reporting issues.
^^^^
"Many" is a weasel word and can weaken meaning on line 77 at column 0
-------------
checkconnect is distributed under the terms of the
             ^^^^^^^^^^^^^^
"is distributed" may be passive voice on line 83 at column 13

@jmuelbert jmuelbert merged commit ef64f58 into main Dec 10, 2024
20 of 28 checks passed
@jmuelbert jmuelbert deleted the dependabot/github_actions/github-actions-817744dbcd branch December 10, 2024 13:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant