cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 05:25:14 +09:00

Files

T

Timur Tukaev 2396d08ee5 ci: add OpenSSF Scorecard workflow

Runs the OpenSSF Scorecard action on:
- weekly schedule (Mon 06:00 UTC)
- branch protection rule changes
- pushes to main
- manual dispatch

Publishes results to:
- the public OpenSSF Scorecard API (scorecard.dev) for transparency
- the GitHub code-scanning dashboard (Security tab) for triage

No README badge is added yet — the badge will be introduced in a
follow-up PR once the first scans have run and any quick-win
improvements (token permissions, dependency pinning) have landed.

Aligns with the project's CNCF Incubation readiness work and the
security self-assessment in progress.

Signed-off-by: Timur Tukaev <timur.tukaev@aenix.io>

2026-05-23 09:12:06 +05:00

auto-release.yaml

ci: use cozystack org noreply email for bot commits

2026-04-13 16:29:07 +02:00

backport.yaml

fix(ci): stop backport workflow from cascading on its own PRs

2026-05-06 18:09:09 +05:00

codegen-drift.yml

ci(api): broaden codegen drift trigger paths and detect untracked files

2026-04-23 22:19:35 +05:00

labels.yaml

chore(ci): adopt CNCF/k8s label conventions