Skip to content

Actions: cisagov/skeleton-docker

Actions

Dependency review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
dependency-review.yml
212 workflow runs
212 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Bump setuptools from 82.0.0 to 83.0.0 in /src Dependency review #241: Pull request #302 opened by dependabot Bot
58s dependabot/pip/src/setuptools-83.0.0
dependabot/pip/src/setuptools-83.0.0
58s
Add a new job to the build workflow that test builds each platform individually Dependency review #240: Pull request #301 synchronize by mcdonnnj
50s improvement/test_build_each_platform
improvement/test_build_each_platform
50s
Add a new job to the build workflow that test builds each platform individually Dependency review #239: Pull request #301 opened by mcdonnnj
50s improvement/test_build_each_platform
improvement/test_build_each_platform
50s
Update setuptools requirement from >=70.1 to >=83.0.0 Dependency review #238: Pull request #300 opened by dependabot Bot
54s dependabot/pip/setuptools-gte-83.0.0
dependabot/pip/setuptools-gte-83.0.0
54s
Only allow Dependabot to update the lockfile in src Dependency review #237: Pull request #299 synchronize by jsf9k
2m 50s improvement/only-update-lockfile-in-src
improvement/only-update-lockfile-in-src
2m 50s
Only allow Dependabot to update the lockfile in src Dependency review #236: Pull request #299 opened by jsf9k
17m 15s improvement/only-update-lockfile-in-src
improvement/only-update-lockfile-in-src
17m 15s
Add a dependabot configuration for the src/ sub-directory Dependency review #235: Pull request #292 synchronize by mcdonnnj
48s improvement/add_dependabot_configuration
improvement/add_dependabot_configuration
48s
Bump library/python from 3.14.3-alpine3.23 to 3.14.5-alpine3.23 Dependency review #234: Pull request #298 synchronize by jsf9k
1m 0s dependabot/docker/library/python-3.14.5-alpine3.23
dependabot/docker/library/python-3.14.5-alpine3.23
1m 0s
Bump library/python from 3.14.3-alpine3.23 to 3.14.5-alpine3.23 Dependency review #233: Pull request #298 opened by dependabot Bot
52s dependabot/docker/library/python-3.14.5-alpine3.23
dependabot/docker/library/python-3.14.5-alpine3.23
52s
Bump library/python from 3.14.3-alpine3.23 to 3.15.0b1-alpine3.23 Dependency review #232: Pull request #297 opened by dependabot Bot
29m 56s dependabot/docker/library/python-3.15.0b1-alpine3.23
dependabot/docker/library/python-3.15.0b1-alpine3.23
29m 56s
Move package versions out of the Dockerfile Dependency review #231: Pull request #287 synchronize by mcdonnnj
1m 2s improvement/break_out_setup_versions
improvement/break_out_setup_versions
1m 2s
Move the one directive from the bandit config to the pre-commit config Dependency review #230: Pull request #296 opened by jsf9k
1m 0s improvement/get-rid-of-bandit-config
improvement/get-rid-of-bandit-config
1m 0s
Update semver requirement from >=3 to >=3.0.4 Dependency review #229: Pull request #295 opened by dependabot Bot
35m 43s dependabot/pip/semver-gte-3.0.4
dependabot/pip/semver-gte-3.0.4
35m 43s
Update setuptools requirement from >=70.1 to >=82.0.1 Dependency review #228: Pull request #294 opened by dependabot Bot
33m 22s dependabot/pip/setuptools-gte-82.0.1
dependabot/pip/setuptools-gte-82.0.1
33m 22s
Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 Dependency review #227: Pull request #293 opened by dependabot Bot
29m 7s dependabot/github_actions/aquasecurity/trivy-action-0.36.0
dependabot/github_actions/aquasecurity/trivy-action-0.36.0
29m 7s
Add a dependabot configuration for the src/ sub-directory Dependency review #226: Pull request #292 opened by mcdonnnj
45s improvement/add_dependabot_configuration
improvement/add_dependabot_configuration
45s
Add workflow code to generate SBOMs and upload them to the release/pre-release Dependency review #225: Pull request #266 synchronize by jsf9k
57s feature/add-sbom
feature/add-sbom
57s
Add workflow code to generate SBOMs and upload them to the release/pre-release Dependency review #224: Pull request #266 synchronize by jsf9k
53s feature/add-sbom
feature/add-sbom
53s
Upgrade Python version in base Docker images to the latest Dependency review #223: Pull request #289 synchronize by jsf9k
58s improvement/upgrade-python-version-to-latest
improvement/upgrade-python-version-to-latest
58s
Bump library/python from 3.14.3-alpine3.23 to 3.15.0a8-alpine3.23 Dependency review #222: Pull request #290 opened by dependabot Bot
57s dependabot/docker/library/python-3.15.0a8-alpine3.23
dependabot/docker/library/python-3.15.0a8-alpine3.23
57s
Upgrade Python version in base Docker images to the latest Dependency review #221: Pull request #289 synchronize by jsf9k
55s improvement/upgrade-python-version-to-latest
improvement/upgrade-python-version-to-latest
55s
Upgrade Python version in base Docker images to the latest Dependency review #220: Pull request #289 synchronize by jsf9k
1m 2s improvement/upgrade-python-version-to-latest
improvement/upgrade-python-version-to-latest
1m 2s
Upgrade Python version in base Docker images to the latest Dependency review #219: Pull request #289 opened by jsf9k
50s improvement/upgrade-python-version-to-latest
improvement/upgrade-python-version-to-latest
50s
Move package versions out of the Dockerfile Dependency review #218: Pull request #287 synchronize by mcdonnnj
3m 15s improvement/break_out_setup_versions
improvement/break_out_setup_versions
3m 15s
Move package versions out of the Dockerfile Dependency review #217: Pull request #287 synchronize by mcdonnnj
57s improvement/break_out_setup_versions
improvement/break_out_setup_versions
57s