Skip to content

build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.4 - #299

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.4.4
Open

build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.4#299
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.4.4

build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.4

e1f8ddf
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner succeeded Sep 9, 2026 in 3m 50s

No anomalous activity on CI/CD runners

No new Harden-Runner detections for this pull request.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
check-dist.yml 34371084763 2 4 View Insights
multi-job-cache.yml 34371084718 3 2 View Insights
nix.yml 34371078316 7 3 View Insights
multi-job-cache.yml 34371078139 3 2 View Insights
install.yml 34371084846 4 2 View Insights
auto_cherry_pick.yml 34371086475 - - Harden-Runner not enabled
nix.yml 34371084661 6 3 View Insights
auto_cherry_pick.yml 34371085539 - - Harden-Runner not enabled
workspaces.yml 34371084953 3 2 View Insights
codeql.yml 34371084843 2 3 View Insights
dependency-review.yml 34371084878 3 3 View Insights
target-dir.yml 34371084815 3 2 View Insights
buildjet.yml 34371084988 5 2 View Insights
coverage.yml 34371085010 4 3 View Insights
auto_cherry_pick.yml 34371087334 - - Harden-Runner not enabled
auto_cherry_pick.yml 34371086946 - - Harden-Runner not enabled
claude_review.yml 34371087400 1 4 View Insights
claude_review.yml 34371087091 1 4 View Insights
claude_review.yml 34371086282 1 4 View Insights
auto_cherry_pick.yml 34371085219 - - Harden-Runner not enabled
claude_review.yml 34371085605 1 4 View Insights
claude_review.yml 34371085216 1 4 View Insights
git-registry.yml 34371084786 2 2 View Insights
simple.yml 34371084793 3 2 View Insights

📚 Learn More

You can learn more about this GitHub check here