Show Harden Runner enabled runs only
build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in the go_modules group across 1 directory (#103)
main
autofix.ci #176autofix.yml6 days ago
6Destinations
7Actions
Insights
docs(agents): Refresh hierarchical AGENTS.md knowledge bases (#102)
main
Fuzz #3fuzz.yml8 days ago
4Destinations
4Actions
Insights
docs(agents): Refresh hierarchical AGENTS.md knowledge bases (#102)
main
Scorecard supply-chain security #62scorecard.yml21 days ago
10Destinations
5Actions
Insights
fix(workflowcheck): Convert goccy/go-yaml decoder panics into bounded errors (#101)
main
Scorecard supply-chain security #60scorecard.yml22 days ago
10Destinations
5Actions
Insights
docs(decisions): Add ADR 0083-0085 pinning the npm CLI toolchain across build and publish stages (#100)
main
Scorecard supply-chain security #59scorecard.yml22 days ago
10Destinations
5Actions
Insights
docs(decisions): Add ADR 0083-0085 pinning the npm CLI toolchain across build and publish stages (#100)
main
Lint #169lint.yml22 days ago
4Destinations
7Actions
Insights
docs(decisions): Add ADR 0082 pinning the publish-stage npm CLI version (#99)
main
Lint #167lint.yml23 days ago
4Destinations
7Actions
Insights
feat(js-ts-npm): Log npm configuration diagnostics in build and publish jobs (#98)
main
Lint #163lint.yml23 days ago
4Destinations
7Actions
Insights
docs(dogfood): Update npm M1 runbook reusable-workflow pin to current main (#96)
main
Scorecard supply-chain security #56scorecard.yml24 days ago
10Destinations
5Actions
Insights
docs(dogfood): Update npm M1 runbook reusable-workflow pin to current main (#96)
main
Lint #160lint.yml24 days ago
4Destinations
7Actions
Insights
docs(dogfood): Update npm M1 runbook reusable-workflow pin to current main (#96)
main
autofix.ci #160autofix.yml24 days ago
6Destinations
7Actions
Insights
feat(command): Record Statement SHA-256 in npm-profile-sign failure output (#95)
main
autofix.ci #158autofix.yml24 days ago
6Destinations
7Actions
Insights
fix(attestation): Accept SHA-pinned signer URI form and enforce pin form before signing (#94)
main
Lint #156lint.yml24 days ago
4Destinations
7Actions
Insights
test: Add property-based fuzz targets, CI fuzz workflows, and testing guide (#92)
main
Lint #152lint.yml25 days ago
4Destinations
7Actions
Insights
feat(npmprofile): Accept union npm OIDC exchange timestamps per ADR 0081 (#90)
main
Lint #147lint.yml25 days ago
5Destinations
7Actions
Insights
docs(specs): Specify npm OIDC exchange response contract per ADR 0081 (#89)
main
Lint #145lint.yml25 days ago
5Destinations
7Actions
Insights
docs(decisions): Add ADR 0081 npm OIDC exchange response contract (#88)
main
Scorecard supply-chain security #49scorecard.yml25 days ago
10Destinations
5Actions
Insights
docs(decisions): Add ADR 0081 npm OIDC exchange response contract (#88)
main
OSV Scanner #150osv-scanner.yml25 days ago
2Destinations
5Actions
Insights
docs(decisions): Add ADR 0081 npm OIDC exchange response contract (#88)
main
Lint #143lint.yml25 days ago
5Destinations
7Actions
Insights
feat(npmprofile): Add tags-only source-ref input for fixed-pipeline release retries (#86)
main
autofix.ci #137autofix.yml25 days ago
5Destinations
7Actions
Insights
docs(specs): Specify tags-only source-ref input and ADR 0080 verification binding (#84)
main
Lint #132lint.yml26 days ago
5Destinations
7Actions
Insights
docs(specs): Specify tags-only source-ref input and ADR 0080 verification binding (#84)
main
autofix.ci #132autofix.yml26 days ago
5Destinations
7Actions
Insights
docs(decisions): add ADRs 0079/0080 for caller-specified build source ref and verification binding (#83)
main
Scorecard supply-chain security #45scorecard.yml26 days ago
10Destinations
5Actions
Insights
docs(decisions): add ADRs 0079/0080 for caller-specified build source ref and verification binding (#83)
main
autofix.ci #129autofix.yml26 days ago
5Destinations
7Actions
Insights
docs(logo): fix range notation in DESIGN.ko.md from tilde to en dash (#78)
main
Lint #119lint.yml27 days ago
5Destinations
7Actions
Insights
feat(npm): Complete public SLSA3 publish workflow (#76)
main
Lint #115lint.ymlabout 1 month ago
5Destinations
7Actions
Insights
feat(npm): Complete public SLSA3 publish workflow (#76)
main
autofix.ci #115autofix.ymlabout 1 month ago
5Destinations
7Actions
Insights
feat(npmprofile): Add OIDC and registry clients (#73)
main
autofix.ci #108autofix.ymlabout 1 month ago
5Destinations
7Actions
Insights
feat(signing): Add Go-native npm provenance signer (#72)
main
Scorecard supply-chain security #35scorecard.ymlabout 1 month ago
10Destinations
5Actions
Insights
feat(signing): Add Go-native npm provenance signer (#72)
main
Lint #106lint.ymlabout 1 month ago
5Destinations
7Actions
Insights