Code

✨ New Probe: Memory safety#4499

Code

Merged

spencerschrock merged 55 commits intoossf:mainossf/scorecard:mainfrom PrinceAsiedu:memory-safety-probePrinceAsiedu/scorecard:memory-safety-probeCopy head branch name to clipboardFeb 27, 2025

+862-2

Commits

Commits on Feb 26, 2025

• draft code

  Show description for a875096
  balteravishay

  committed
  a875096

  Copy full SHA for a875096

• Fix sorting contributors before comparing in test (ossf#4455)

  Show description for 821e8d8
  

  spencerschrock

  authored and

  balteravishay

  committed
  821e8d8

  Copy full SHA for 821e8d8

• 🌱 Bump actions/setup-go from 5.1.0 to 5.2.0 (ossf#4445)

  Show description for 8047295
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  8047295

  Copy full SHA for 8047295

• 🌱 Bump golang.org/x/crypto from 0.29.0 to 0.31.0 (ossf#4460)

  Show description for 8a2004f
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  8a2004f

  Copy full SHA for 8a2004f

• Downgrade osv-scanner to v1.9.0 (ossf#4461)

  Show description for a9c3737
  

  spencerschrock

  authored and

  balteravishay

  committed
  a9c3737

  Copy full SHA for a9c3737

• 🌱 Bump the github-actions group across 1 directory with 3 updates (ossf#4467)

  Show description for 06d78cb
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  06d78cb

  Copy full SHA for 06d78cb

• 🌱 Bump the gomod group across 2 directories with 4 updates (ossf#4469)

  Show description for 688500f
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  688500f

  Copy full SHA for 688500f

• update definition.yaml

  Show description for 5dc1514
  balteravishay

  committed
  5dc1514

  Copy full SHA for 5dc1514

• remove prominent languages code

  Show description for 4b578fa
  balteravishay

  committed
  4b578fa

  Copy full SHA for 4b578fa

• tests

  Show description for 8977acc
  balteravishay

  committed
  8977acc

  Copy full SHA for 8977acc

• more implementation details

  Show description for c1419a8
  balteravishay

  committed
  c1419a8

  Copy full SHA for c1419a8

• 🌱 Bump the gomod group across 2 directories with 3 updates (ossf#4470)

  Show description for 5522abc
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  5522abc

  Copy full SHA for 5522abc

• ✨ implement more of the Azure DevOps client (ossf#4456)

  Show description for 95407bc
  

  JamieMagee

  authored and

  balteravishay

  committed
  95407bc

  Copy full SHA for 95407bc

• 🌱 Bump github.com/google/osv-scanner from 1.9.0 to 1.9.2 (ossf#4464)

  Show description for e379792
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  e379792

  Copy full SHA for e379792

• 🌱 Bump github.com/rhysd/actionlint from 1.7.4 to 1.7.6 (ossf#4478)

  Show description for f8f4e2c
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  f8f4e2c

  Copy full SHA for f8f4e2c

• 🌱 Bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.4 in /tools (ossf#4479)

  Show description for 0c096bf
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  0c096bf

  Copy full SHA for 0c096bf

• 🌱 Bump the gomod group across 2 directories with 6 updates (ossf#4481)

  Show description for bab3e61
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  bab3e61

  Copy full SHA for bab3e61

• 📖 governance: Add meeting note archives from 2021 through 2024 (ossf#4482)

  Show description for 52564c0
  

  2 peopleauthored and

  balteravishay

  committed
  52564c0

  Copy full SHA for 52564c0

• Enables scanning of open source dependencies used by Chromium. (ossf#4476)

  Show description for 7926e28
  

  renewitt

  authored and

  balteravishay

  committed
  7926e28

  Copy full SHA for 7926e28

• Update Metal3 repos in projects.csv (ossf#4442)

  Show description for 3dc104c
  

  tuminoid

  authored and

  balteravishay

  committed
  3dc104c

  Copy full SHA for 3dc104c

• 🌱 Logging a warning if readGitHubTokens finds several values which clash. (ossf#4483)

  Show description for 6ff8bc3
  

  aunovis-heidrich

  authored and

  balteravishay

  committed
  6ff8bc3

  Copy full SHA for 6ff8bc3

• 🌱 Bump the gomod group across 2 directories with 3 updates (ossf#4485)

  Show description for 73a5cd2
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  73a5cd2

  Copy full SHA for 73a5cd2

• 🌱 Bump the github-actions group across 1 directory with 5 updates (ossf#4492)

  Show description for dcdaf56
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  dcdaf56

  Copy full SHA for dcdaf56

• 🌱 Bump the distroless group across 6 directories with 1 update (ossf#4488)

  Show description for 3c6c20b
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  3c6c20b

  Copy full SHA for 3c6c20b

• 🌱 Bump the golang group across 8 directories with 1 update (ossf#4496)

  Show description for 3470be3
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  3470be3

  Copy full SHA for 3470be3

• 🌱 Bump github.com/rhysd/actionlint from 1.7.6 to 1.7.7 (ossf#4495)

  Show description for b0b0ecf
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  b0b0ecf

  Copy full SHA for b0b0ecf

• 🌱 Bump the github-actions group across 1 directory with 2 updates (ossf#4497)

  Show description for 5e00565
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  5e00565

  Copy full SHA for 5e00565

• 🌱 Bump the gomod group across 2 directories with 4 updates (ossf#4498)

  Show description for e4080e6
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  e4080e6

  Copy full SHA for e4080e6

• more coverage

  Show description for 2812e97
  balteravishay

  committed
  2812e97

  Copy full SHA for 2812e97

• more tests

  Show description for 18856a7
  balteravishay

  committed
  18856a7

  Copy full SHA for 18856a7

• fix list

  Show description for 6421907
  balteravishay

  committed
  6421907

  Copy full SHA for 6421907

• fix search in map

  Show description for 62023c7
  balteravishay

  committed
  62023c7

  Copy full SHA for 62023c7

• 🌱 Bump the github-actions group with 2 updates (ossf#4503)

  Show description for dbbe114
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  dbbe114

  Copy full SHA for dbbe114

• 🌱 Bump actions/setup-go from 5.2.0 to 5.3.0 (ossf#4504)

  Show description for 0416bfe
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  0416bfe

  Copy full SHA for 0416bfe

• 🌱 Bump github.com/golang/glog from 1.2.2 to 1.2.4 (ossf#4507)

  Show description for 8ba9a03
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  8ba9a03

  Copy full SHA for 8ba9a03

• 🌱 Bump github/codeql-action in the github-actions group (ossf#4509)

  Show description for 06fa25a
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  06fa25a

  Copy full SHA for 06fa25a

• pr comments

  Show description for d732856
  balteravishay

  committed
  d732856

  Copy full SHA for d732856

• 🌱 Bump the github-actions group with 4 updates (ossf#4513)

  Show description for f4b1863
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  f4b1863

  Copy full SHA for f4b1863

• 🌱 Bump the golang group across 8 directories with 1 update (ossf#4512)

  Show description for bb1ef7f
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  bb1ef7f

  Copy full SHA for bb1ef7f

• 🌱 Bump the gomod group across 2 directories with 8 updates (ossf#4515)

  Show description for 4ea69a4
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  4ea69a4

  Copy full SHA for 4ea69a4

• 🌱 remove OS and Arch info from scorecard release binary name (ossf#4520)

  Show description for 00f5845
  

  timothysparg

  authored and

  balteravishay

  committed
  00f5845

  Copy full SHA for 00f5845

• ✨ Add GitHub git compatibility mode (ossf#4474)

  Show description for 2480be0
  

  spencerschrock

  authored and

  balteravishay

  committed
  2480be0

  Copy full SHA for 2480be0

• Cache files during gitfile handler setup (ossf#4522)

  Show description for c3f340c
  

  spencerschrock

  authored and

  balteravishay

  committed
  c3f340c

  Copy full SHA for c3f340c

• change to be specific for unsafe blocks

  Show description for 7fe8b2a
  balteravishay

  committed
  7fe8b2a

  Copy full SHA for 7fe8b2a

• 🌱 Bump the gomod group across 2 directories with 3 updates (ossf#4470)

  Show description for 7458007
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  7458007

  Copy full SHA for 7458007

• 🌱 Bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.4 in /tools (ossf#4479)

  Show description for 217bcc2
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  217bcc2

  Copy full SHA for 217bcc2

• 🌱 Bump the gomod group across 2 directories with 4 updates (ossf#4527)

  Show description for a4f2ca8
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  a4f2ca8

  Copy full SHA for a4f2ca8

• 🌱 Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 (ossf#4524)

  Show description for 7f3e731
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  7f3e731

  Copy full SHA for 7f3e731

• 🌱 Bump the golang group across 8 directories with 1 update (ossf#4525)

  Show description for ff9b74d
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  ff9b74d

  Copy full SHA for ff9b74d

• 🌱 Bump github.com/golangci/golangci-lint from 1.63.4 to 1.64.5 in /tools (ossf#4526)

  Show description for 1448536
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  1448536

  Copy full SHA for 1448536

• 🌱 Bump the github-actions group across 1 directory with 3 updates (ossf#4529)

  Show description for f0e54b1
  

  dependabot[bot]

  authored and

  balteravishay

  committed
  f0e54b1

  Copy full SHA for f0e54b1

• pr fixes

  Show description for d537a44
  balteravishay

  committed
  d537a44

  Copy full SHA for d537a44

• Merge branch 'main' into memory-safety-probe

  balteravishay

  committed
  136c3f3

  Copy full SHA for 136c3f3

• probes.md

  Show description for 4bae2ed
  balteravishay

  committed
  4bae2ed

  Copy full SHA for 4bae2ed

Commits on Feb 27, 2025

• return finding.OutcomeError when encountering parse errors

  Show description for 0aa68f4
  spencerschrock

  committed
  0aa68f4

  Copy full SHA for 0aa68f4