Repository navigation

Scorecard: Pinned-Dependencies (5/10) #439

Open

Labels

opened

on Jul 14, 2026

OpenSSF Scorecard Finding

Check: Pinned-Dependencies
Score: 5 / 10
Finding: dependency not pinned by hash detected -- score normalized to 5

Remediation

https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies

Context

This issue was automatically created from an OpenSSF Scorecard scan on 2026-07-14.

don-petry
added
scorecardOpenSSF Scorecard finding
on Jul 14, 2026
don-petry commented on Jul 20, 2026
don-petry
on Jul 20, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Jul 27, 2026
don-petry
on Jul 27, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Aug 3, 2026
don-petry
on Aug 3, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Aug 10, 2026
don-petry
on Aug 10, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Aug 17, 2026
don-petry
on Aug 17, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Aug 24, 2026
don-petry
on Aug 24, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Aug 31, 2026
don-petry
on Aug 31, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Sep 7, 2026
don-petry
on Sep 7, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Sep 14, 2026
don-petry
on Sep 14, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Sep 21, 2026
don-petry
on Sep 21, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Sep 28, 2026
don-petry
on Sep 28, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Oct 5, 2026
don-petry
on Oct 5, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Oct 12, 2026
don-petry
on Oct 12, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Oct 19, 2026
don-petry
on Oct 19, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Oct 20, 2026
don-petry
on Oct 20, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Oct 26, 2026
don-petry
on Oct 26, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5
don-petry commented on Nov 2, 2026
don-petry
on Nov 2, 2026
CollaboratorAuthor
Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests