Repository navigation

fix(security): clear open Scorecard alerts - #113

Merged

enriqueavindi merged 7 commits into

mainfrom

fix/scorecard-open-findings

Nov 4, 2026

Merged

fix(security): clear open Scorecard alerts#113
enriqueavindi merged 7 commits into
mainfrom
fix/scorecard-open-findings

Commits on Nov 4, 2026
- fix(deps): bump golang.org/x/net to v0.62.0
  enriqueavindi
  committed
  d69de51
- build: pin container base images by digest
  enriqueavindi
  committed
  e2f6797
- test: add fuzz target for the container request mutation
  enriqueavindi
  committed
  95c473a
- ci: pin actions by SHA and add unit and fuzz jobs
  enriqueavindi
  committed
  96e3299
- ci(codeql): scan on main by default when DEVELOPMENT_FLOW is unset
  enriqueavindi
  committed
  9851287
- ci(fuzz): keep the envtest suite out of the fuzz run
  enriqueavindi
  committed
  f6e1c51
- test(fuzz): split the target to lower cognitive complexity
  enriqueavindi
  committed
  ce6d371