Skip to content

Bump ossf/scorecard-action from 2.4.1 to 2.4.2 #623

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 13, 2025
+1 −1
Merged

Bump ossf/scorecard-action from 2.4.1 to 2.4.2 #623

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/scorecards.yml
View file
Original file line number Diff line number Diff line change
@@ -25,7 +25,7 @@ jobs:
persist-credentials: false

- name: "Run analysis"
uses: ossf/[email protected].1
uses: ossf/[email protected].2
with:
results_file: results.sarif
results_format: sarif

Unchanged files with check annotations Beta

View file
src/Library/Signature/Algorithm/EdDSA.php
switch ($key->get('crv')) {
case 'Ed25519':
return Ed25519::publickey_from_secretkey($d);

Check failure on line 102 in src/Library/Signature/Algorithm/EdDSA.php

GitHub Actions / 3️⃣ Static Analysis 

Call to internal static method ParagonIE_Sodium_Core_Ed25519::publickey_from_secretkey().
case 'X25519':
if (extension_loaded('sodium')) {
return sodium_crypto_scalarmult_base($d);
View file
src/Bundle/Resources/config/analyzers.php
$container->set(HS384KeyAnalyzer::class);
$container->set(HS512KeyAnalyzer::class);
if (class_exists(NistCurve::class)) {

Check failure on line 48 in src/Bundle/Resources/config/analyzers.php

GitHub Actions / 3️⃣ Static Analysis 

Access to constant on internal class Jose\Component\Core\Util\Ecc\NistCurve.
$container->set(ES256KeyAnalyzer::class);
$container->set(ES384KeyAnalyzer::class);
$container->set(ES512KeyAnalyzer::class);
View file
src/Bundle/DependencyInjection/JoseFrameworkExtension.php
use Symfony\Component\HttpKernel\DependencyInjection\Extension;
use function count;
final class JoseFrameworkExtension extends Extension implements PrependExtensionInterface

Check failure on line 15 in src/Bundle/DependencyInjection/JoseFrameworkExtension.php

GitHub Actions / 3️⃣ Static Analysis 

Class Jose\Bundle\JoseFramework\DependencyInjection\JoseFrameworkExtension extends internal class Symfony\Component\HttpKernel\DependencyInjection\Extension.
{
/**
* @param Source[] $sources