Scorecards supply-chain security

Workflow runs for Scorecards supply-chain security

• refactor: move the config-hash helpers to internal/confighash

  completed successfully:
  Scorecards supply-chain security#1922:Commitfc55a94pushedbyndeloof
  main

  Oct 29, 20261m 0s
  More actions for workflow run 1922

• build(lint): bump golangci-lint to v2.15.0 and fix what it now reports

  completed successfully:
  Scorecards supply-chain security#1921:Commit343bb38pushedbyndeloof
  main

  Oct 28, 20261m 5s
  More actions for workflow run 1921

• build(deps): bump github/codeql-action/upload-sarif

  failed at startup:
  Scorecards supply-chain security#1920:Commit38ec632pushedbyndeloof
  main

  Oct 28, 2026Startup failure
  More actions for workflow run 1920

• build(deps): bump docker/github-builder/.github/workflows/bake.yml

  failed at startup:
  Scorecards supply-chain security#1919:Commitbce138epushedbyndeloof
  main

  Oct 28, 2026Startup failure
  More actions for workflow run 1919

• feat(build): pass parallel limit to bake as --jobs

  failed at startup:
  Scorecards supply-chain security#1918:Commit4f59d9fpushedbyndeloof
  main

  Oct 28, 2026Startup failure
  More actions for workflow run 1918

• docs(projectloader): point the comments to the new home of the depend…

  failed at startup:
  Scorecards supply-chain security#1917:Commit4d6f2dbpushedbyndeloof
  main

  Oct 27, 2026Startup failure
  More actions for workflow run 1917

• docs(compose): tighten the startMx and provider test comments after r…

  failed at startup:
  Scorecards supply-chain security#1916:Commitf5f573bpushedbyndeloof
  main

  Oct 27, 2026Startup failure
  More actions for workflow run 1916

• test(compose): bound the unsupported-condition wait, compare the dead…

  failed at startup:
  Scorecards supply-chain security#1915:Commit27fbcaepushedbyndeloof
  main

  Oct 27, 2026Startup failure
  More actions for workflow run 1915

• docs(compose): tie startMx to docker/compose#12846 and mark it for re…

  failed at startup:
  Scorecards supply-chain security#1914:Commitd9f64aapushedbyndeloof
  main

  Oct 27, 2026Startup failure
  More actions for workflow run 1914

• test(containerops): pin which containers cp targets

  failed at startup:
  Scorecards supply-chain security#1913:Commit3640112pushedbyndeloof
  main

  Oct 27, 2026Startup failure
  More actions for workflow run 1913

• test(executor): stop timing the caller's cancel against the wait's fi…

  failed at startup:
  Scorecards supply-chain security#1912:Commitb1375cbpushedbyndeloof
  main

  Oct 27, 2026Startup failure
  More actions for workflow run 1912

• fix(up): honor -t when an attached up stops the application

  failed at startup:
  Scorecards supply-chain security#1911:Commit4d61d5apushedbyndeloof
  main

  Oct 27, 2026Startup failure
  More actions for workflow run 1911

• refactor(executor): hand the hook-log listener to runStart only

  failed at startup:
  Scorecards supply-chain security#1910:Commitd713e11pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1910

• test(start): pin that a rewritten project is injected once, settle th…

  failed at startup:
  Scorecards supply-chain security#1909:Commit86e504cpushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1909

• test(up): pin that the Create phase carries the plan's project, settl…

  failed at startup:
  Scorecards supply-chain security#1908:Commit4e552c6pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1908

• api: reject incompatible Up options with a typed error

  failed at startup:
  Scorecards supply-chain security#1907:Commite0bbd29pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1907

• refactor(executor): let a caller drive the create and start phases it…

  failed at startup:
  Scorecards supply-chain security#1906:Commita5d9b33pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1906

• test(e2e): pin that down -v keeps the volumes the project does not own

  failed at startup:
  Scorecards supply-chain security#1905:Commitfab1bb4pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1905

• Apply review suggestions for the dotted service name fix

  failed at startup:
  Scorecards supply-chain security#1904:Commit06035c0pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1904

• fix(compose): skip the lowered-environment allocation in envResolverW…

  failed at startup:
  Scorecards supply-chain security#1903:Commit0c7f8a3pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1903

• build(deps): bump github/codeql-action/upload-sarif

  failed at startup:
  Scorecards supply-chain security#1902:Commit4b81939pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1902

• build(deps): bump the docker-actions group with 2 updates

  failed at startup:
  Scorecards supply-chain security#1901:Commit81d0e0cpushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1901

• fix(monitor): subscribe to events since before the initial listing

  failed at startup:
  Scorecards supply-chain security#1900:Commit4ede2fapushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1900

• test(e2e): lock pre_start's streamed output and tighten the foregroun…

  failed at startup:
  Scorecards supply-chain security#1899:Commit34cae94pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1899

• fix(executor): report a genuine dependency failure even as the phase …

  failed at startup:
  Scorecards supply-chain security#1898:Commitfc53e43pushedbyndeloof
  main

  Oct 26, 2026Startup failure
  More actions for workflow run 1898