Skip to content

chore(deps): update ossf/scorecard-action action to v2.4.4 (.github/workflows)#2499

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github/workflows/ossf-scorecard-action-2.x
Open

chore(deps): update ossf/scorecard-action action to v2.4.4 (.github/workflows)#2499
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github/workflows/ossf-scorecard-action-2.x

Conversation

@renovate

@renovate renovate Bot commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
ossf/scorecard-action action patch v2.4.3v2.4.4

Release Notes

ossf/scorecard-action (ossf/scorecard-action)

v2.4.4

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.5.0 release. For a complete list of changes, please refer to the Scorecard v5.4.0 release notes and the Scorecard v5.5.0 release notes.

Full Changelog: ossf/scorecard-action@v2.4.3...v2.4.4


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner July 24, 2026 00:32
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jul 24, 2026
@greptile-apps

greptile-apps Bot commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Updates the pinned ossf/scorecard-action workflow dependency from v2.4.3 to v2.4.4.

Confidence Score: 5/5

The PR appears safe to merge with no actionable issues identified.

The change is limited to a patch-version update of a commit-pinned GitHub Action and preserves the existing workflow inputs, permissions, and execution structure.

Important Files Changed

Filename Overview
.github/workflows/scorecard.yml Replaces the Scorecard action’s pinned v2.4.3 commit SHA with the v2.4.4 commit SHA; no workflow configuration or permissions change.

Reviews (1): Last reviewed commit: "chore(deps): update ossf/scorecard-actio..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants