Skip to content

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.4.3
Open

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.4.3

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3

c8cc550
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner succeeded Feb 17, 2026 in 34s

No anomalous activity on CI/CD runners

No new Harden-Runner detections for this pull request.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

馃搵 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
auto_cherry_pick.yml 22087652168 - - Harden-Runner not enabled
claude_review.yml 22087652190 1 4 View Insights
push.yml 22087652017 5 3 View Insights
dependency-review.yml 22087652037 3 3 View Insights

馃摎 Learn More

You can learn more about this GitHub check here