Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Approved technical charter for Criticality Score #680

Closed
wants to merge 28 commits into from
Closed

Add Approved technical charter for Criticality Score #680

wants to merge 28 commits into from

Commits on Sep 4, 2024

  1. Technical Charter 

    Signed-off-by: riaan kleinhans <[email protected]>
    @redenmartinez @riaankleinhans
    redenmartinez authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    051c59a View commit details
    Browse the repository at this point in the history

  2. Update CHARTER.md 

    Signed-off-by: Amanda L Martin <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
    @hythloda @riaankleinhans
    hythloda authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    053d2b1 View commit details
    Browse the repository at this point in the history

  3. Fix the "v2" behavior to match Go's git + mod functionality. (ossf#563) 

    Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
    @calebbrown @riaankleinhans
    calebbrown authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    d7a3cf1 View commit details
    Browse the repository at this point in the history

  4. Add @latest to go install commands in docs. (ossf#572) 

    Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
    @calebbrown @riaankleinhans
    calebbrown authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    2d69f99 View commit details
    Browse the repository at this point in the history

  5. Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (ossf#562) 

    Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    c8f5c78 View commit details
    Browse the repository at this point in the history

  6. Bump github.com/hasura/go-graphql-client from 0.12.0 to 0.12.1 (ossf#559 

    )

Bumps [github.com/hasura/go-graphql-client](https://github.com/hasura/go-graphql-client) from 0.12.0 to 0.12.1.
- [Release notes](https://github.com/hasura/go-graphql-client/releases)
- [Commits](hasura/go-graphql-client@v0.12.0...v0.12.1)

---
updated-dependencies:
- dependency-name: github.com/hasura/go-graphql-client
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    900a0ba View commit details
    Browse the repository at this point in the history

  7. Bump golang.org/x/sys from 0.17.0 to 0.18.0 (ossf#561) 

    Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.17.0 to 0.18.0.
- [Commits](golang/sys@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    8329b09 View commit details
    Browse the repository at this point in the history

  8. Bump google.golang.org/api from 0.156.0 to 0.170.0 (ossf#570) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.156.0 to 0.170.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.156.0...v0.170.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    aebf974 View commit details
    Browse the repository at this point in the history

  9. Bump cloud.google.com/go/bigquery from 1.57.1 to 1.59.1 (ossf#544) 

    Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.57.1 to 1.59.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.57.1...bigquery/v1.59.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    160b7f2 View commit details
    Browse the repository at this point in the history

  10. Bump gocloud.dev from 0.36.0 to 0.37.0 (ossf#565) 

    Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.36.0 to 0.37.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: gocloud.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    f9ac845 View commit details
    Browse the repository at this point in the history

  11. Fix linter issues (ossf#589) 

    * Update go.work.sum

Signed-off-by: Caleb Brown <[email protected]>

* Add a long timeout for golanci-lint

Signed-off-by: Caleb Brown <[email protected]>

---------

Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
    @calebbrown @riaankleinhans
    calebbrown authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    156c2a5 View commit details
    Browse the repository at this point in the history

  12. Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /tools (ossf… 

    …#569)

Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    e25f35d View commit details
    Browse the repository at this point in the history

  13. Bump golang.org/x/sys from 0.18.0 to 0.19.0 (ossf#583) 

    Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.18.0 to 0.19.0.
- [Commits](golang/sys@v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    0de8006 View commit details
    Browse the repository at this point in the history

  14. Bump actions/checkout from 4.1.1 to 4.1.2 (ossf#566) 

    Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@b4ffde6...9bb5618)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    4d1396c View commit details
    Browse the repository at this point in the history

  15. Bump cloud.google.com/go/bigquery from 1.59.1 to 1.60.0 (ossf#581) 

    Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.59.1 to 1.60.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.59.1...spanner/v1.60.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    b636d5e View commit details
    Browse the repository at this point in the history

  16. Bump google.golang.org/api from 0.170.0 to 0.174.0 (ossf#587) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.170.0 to 0.174.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.170.0...v0.174.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    6fd4eb8 View commit details
    Browse the repository at this point in the history

  17. Bump github/codeql-action from 3.24.3 to 3.25.1 (ossf#588) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.3 to 3.25.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v3.24.3...v3.25.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    9a91e8b View commit details
    Browse the repository at this point in the history

  18. Bump actions/upload-artifact from 4.3.1 to 4.3.2 (ossf#590) 

    Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.1 to 4.3.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5d5d22a...1746f4a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    2af431b View commit details
    Browse the repository at this point in the history

  19. Bump github.com/golangci/golangci-lint from 1.56.2 to 1.57.2 in /tools ( 

    ossf#582)

Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.56.2 to 1.57.2.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v1.56.2...v1.57.2)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    1b8125b View commit details
    Browse the repository at this point in the history

  20. Bump golang.org/x/net from 0.22.0 to 0.23.0 (ossf#591) 

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](golang/net@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    8e9e42a View commit details
    Browse the repository at this point in the history

  21. Fix the issue lookback duration to be 90 days. (ossf#605) 

    Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
    @calebbrown @riaankleinhans
    calebbrown authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    76d7572 View commit details
    Browse the repository at this point in the history

  22. Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 (ossf#606) 

    Bumps google.golang.org/protobuf from 1.33.0 to 1.34.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    007bf19 View commit details
    Browse the repository at this point in the history

  23. Bump github/codeql-action from 3.25.1 to 3.25.3 (ossf#601) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.1 to 3.25.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v3.25.1...v3.25.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    10980de View commit details
    Browse the repository at this point in the history

  24. Bump google.golang.org/api from 0.174.0 to 0.177.0 (ossf#607) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.174.0 to 0.177.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.174.0...v0.177.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    695f457 View commit details
    Browse the repository at this point in the history

  25. Bump cloud.google.com/go/bigquery from 1.60.0 to 1.61.0 (ossf#600) 

    Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.60.0 to 1.61.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.60.0...bigquery/v1.61.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    41674ff View commit details
    Browse the repository at this point in the history

  26. Bump golang.org/x/sys from 0.19.0 to 0.20.0 (ossf#610) 

    Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.19.0 to 0.20.0.
- [Commits](golang/sys@v0.19.0...v0.20.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
    @dependabot @riaankleinhans
    dependabot[bot] authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    14b97be View commit details
    Browse the repository at this point in the history

  27. Fix typo in README.md (ossf#620) 

    Signed-off-by: Dan Baston <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
    @dbaston @riaankleinhans
    dbaston authored and riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    8405019 View commit details
    Browse the repository at this point in the history

  28. update charter 

    Signed-off-by: riaan kleinhans <[email protected]>
    @riaankleinhans
    riaankleinhans committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    e515d70 View commit details
    Browse the repository at this point in the history