2 Commits

Author	SHA1	Message	Date
dependabot[bot]	acc5ffcf36	build(deps): bump ossf/scorecard-action from 1.0.2 to 1.0.4 (#5235) ... Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.2 to 1.0.4. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Commits](c8416b0b2b...c1aec4ac82) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2022-03-07 05:37:26 -08:00
Yong Tang	402c08fea0	Add OSSF Security Scoreboard Scan (#5208) ... * Add OSSF Security Scoreboard Scan This PR adds OSSF's Security Scoreboard Scan, to help tighten CoreDNS's security practice. OSSF Scoreboard is recommended by GitHub. The result will show up in project's "Code Scanning Alerts" (together with existing CodeQL scan we already have). Signed-off-by: Yong Tang <yong.tang.github@outlook.com>	2022-02-28 12:02:03 -05:00