Commit history

1. Commits on Apr 8, 2026

   • Analysis Progress Monitoring Improvement (#419)

     SUSTAPLE117

     authored
     5ea29c5View commit details

     Copy full SHA for 5ea29c5

     Browse repository at this point
2. Commits on Apr 6, 2026

   • updated goreleaser version (#418)

     SUSTAPLE117

     authored
     b3cd202View commit details

     Copy full SHA for b3cd202

     Browse repository at this point

   • updated goreleaser (#417)

     SUSTAPLE117

     authored
     e572279View commit details

     Copy full SHA for e572279

     Browse repository at this point

   • generated an actual guid so that it respects the github sarif spec. Replaced the all-zeros GUID with 0c8bf036-487d-590a-8c22-c41f287b1560 — a deterministic UUID v5 derived from https://boostsecurit…

     Show description for fac3b02
     SUSTAPLE117

     authored
     fac3b02View commit details

     Copy full SHA for fac3b02

     Browse repository at this point

   • fix(github): org repo listing fails with fine-grained PATs lacking Issues:Read (#415)

     Show description for 984640c
     

     fproulx-boostsecurity

     and

     claude

     authored
     984640cView commit details

     Copy full SHA for 984640c

     Browse repository at this point
3. Commits on Apr 2, 2026

   • build(deps): bump actions/checkout from 5.0.0 to 6.0.2 (#408)

     Show description for 3b89252
     dependabot[bot]

     authored
     3b89252View commit details

     Copy full SHA for 3b89252

     Browse repository at this point

   • Fix Yaml Parse Errors (#414)

     SUSTAPLE117

     authored
     052999eView commit details

     Copy full SHA for 052999e

     Browse repository at this point

   • fix docker image parsing and purls (#413)

     SUSTAPLE117

     authored
     ea261b1View commit details

     Copy full SHA for ea261b1

     Browse repository at this point

   • go 1.26 + bumped code deps (#412)

     SUSTAPLE117

     authored
     2066e9bView commit details

     Copy full SHA for 2066e9b

     Browse repository at this point
4. Commits on Apr 1, 2026

   • switch to go-git implementation (#400)

     SUSTAPLE117

     authored
     2d931f3View commit details

     Copy full SHA for 2d931f3

     Browse repository at this point

   • build(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#410)

     Show description for 9c789fe
     dependabot[bot]

     authored
     9c789feView commit details

     Copy full SHA for 9c789fe

     Browse repository at this point

   • build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#411)

     Show description for 9b68f44
     dependabot[bot]

     authored
     9b68f44View commit details

     Copy full SHA for 9b68f44

     Browse repository at this point

   • build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 (#405)

     Show description for 5d5e6f9
     dependabot[bot]

     authored
     5d5e6f9View commit details

     Copy full SHA for 5d5e6f9

     Browse repository at this point

   • build(deps): bump actions/setup-go from 5.5.0 to 6.4.0 (#403)

     Show description for 17a66bc
     dependabot[bot]

     authored
     17a66bcView commit details

     Copy full SHA for 17a66bc

     Browse repository at this point
5. Commits on Mar 26, 2026

   • Add Snapshot Testing (#401)

     SUSTAPLE117

     authored
     3401c35View commit details

     Copy full SHA for 3401c35

     Browse repository at this point

   • Fix purl-based skip matching for github_action_from_unverified_creator_used (#398)

     mbarbero

     authored
     9023469View commit details

     Copy full SHA for 9023469

     Browse repository at this point

   • Add Resiliency to Repo Batch Fetch (#399)

     SUSTAPLE117

     authored
     73de8c2View commit details

     Copy full SHA for 73de8c2

     Browse repository at this point
6. Commits on Mar 10, 2026

   • build(deps): bump golang.org/x/crypto (#380)

     Show description for 494511b
     dependabot[bot]

     authored
     494511bView commit details

     Copy full SHA for 494511b

     Browse repository at this point

   • build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#374)

     Show description for 0b05c61
     dependabot[bot]

     authored
     0b05c61View commit details

     Copy full SHA for 0b05c61

     Browse repository at this point

   • build(deps): bump sigstore/cosign-installer from 3.9.2 to 4.0.0 (#377)

     Show description for 63ba4a6
     dependabot[bot]

     authored
     63ba4a6View commit details

     Copy full SHA for 63ba4a6

     Browse repository at this point

   • build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#376)

     Show description for 3c62ba1
     dependabot[bot]

     authored
     3c62ba1View commit details

     Copy full SHA for 3c62ba1

     Browse repository at this point

   • build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 (#375)

     Show description for 0d310d8
     dependabot[bot]

     authored
     0d310d8View commit details

     Copy full SHA for 0d310d8

     Browse repository at this point

   • build(deps): bump github.com/mark3labs/mcp-go from 0.41.1 to 0.42.0 (#373)

     Show description for 40c2652
     dependabot[bot]

     authored
     40c2652View commit details

     Copy full SHA for 40c2652

     Browse repository at this point

   • build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.0 (#372)

     Show description for 25dae80
     dependabot[bot]

     authored
     25dae80View commit details

     Copy full SHA for 25dae80

     Browse repository at this point

   • build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#371)

     Show description for eb65734
     dependabot[bot]

     authored
     eb65734View commit details

     Copy full SHA for eb65734

     Browse repository at this point

   • build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 (#370)

     Show description for cd169cb
     dependabot[bot]

     authored
     cd169cbView commit details

     Copy full SHA for cd169cb

     Browse repository at this point

   • build(deps): bump gitlab.com/gitlab-org/api/client-go (#369)

     Show description for 3548602
     dependabot[bot]

     authored
     3548602View commit details

     Copy full SHA for 3548602

     Browse repository at this point
7. Commits on Mar 9, 2026

   • Fix SARIF formatter silently dropping findings and missing locations (#393)

     Show description for 985017b
     

     3 peopleauthored
     985017bView commit details

     Copy full SHA for 985017b

     Browse repository at this point

   • Add --fail-on-violation flag to exit non-zero when violations are detected (#392)

     Show description for 4d07fc4
     

     4 peopleauthored
     4d07fc4View commit details

     Copy full SHA for 4d07fc4

     Browse repository at this point
8. Commits on Feb 23, 2026

   • Use case-insensitive matching for Git error "Not a valid object name" (#389)

     mdferdousalam

     authored
     a54a29aView commit details

     Copy full SHA for a54a29a

     Browse repository at this point
9. Commits on Feb 2, 2026

   • Add lotp_targets field to untrusted_checkout_exec findings (#386)

     Show description for f350a41
     

     fproulx-boostsecurity

     and

     claude

     authored
     f350a41View commit details

     Copy full SHA for f350a41

     Browse repository at this point
10. Commits on Jan 13, 2026

    • Add structured metadata fields to findings for programmatic access (#385)

      Show description for 849436a
      

      fproulx-boostsecurity

      and

      claude

      authored
      849436aView commit details

      Copy full SHA for 849436a

      Browse repository at this point
11. Commits on Jan 9, 2026

    • Fix SARIF validation errors for GitHub CodeQL upload (#384)

      Show description for a6900f5
      

      Copilot

      and

      fproulx-boostsecurity

      authored
      a6900f5View commit details

      Copy full SHA for a6900f5

      Browse repository at this point

    • Add ubuntu-slim as built-in GitHub Actions runner (#383)

      Show description for 5760250
      

      Copilot

      and

      fproulx-boostsecurity

      authored
      5760250View commit details

      Copy full SHA for 5760250

      Browse repository at this point
12. Commits on Nov 28, 2025

    • Add GHSA-pwf7-47c3-mfhx to OSV advisories database (#381)

      Show description for f2b7ebe
      kawsarahmedbhuiyan

      authored
      f2b7ebeView commit details

      Copy full SHA for f2b7ebe

      Browse repository at this point