Sync with upstream master by cruizen · Pull Request #6 · platform9/dex

cruizen · 2022-10-17T21:19:14Z

Overview

Sync the pf9 fork with dexidp/dex master to bring in all the changes from https://github.com/dexidp/dex/releases/tag/v2.35.3 + this PR dexidp#2708 from master

What this PR does / why we need it

Bring in the upstream fixes to improve security (there is a known CVE), bring in fixes / optimisations
ArgoCD has now released patches for v2.2 and v2.4 that fix this in ArgoCD's dex server pod (by upgrading to v2.25.3 of upstream dex).
We are missing this (just upgrading ArgoCD will not help) since we use our own forked dex

Special notes for your reviewer

Does this PR introduce a user-facing change?

Note

Medium Risk
Touches CI/release pipelines and container build/signing paths; misconfiguration could break publishing, provenance, or image runtime expectations despite limited application logic changes.

Overview
CI and release automation is revamped: introduces reusable artifacts.yaml (called from ci.yaml and new release.yaml) that builds multi-arch images (adds s390x), optionally pushes on release/tag, signs with cosign, creates provenance attestations, and runs Trivy scans with caching + SARIF uploads; adds OpenSSF Scorecard and a scheduled Trivy DB cache workflow, and removes legacy docker.yaml/codeql-analysis.yaml.

Build/tooling inputs are updated: Docker build now uses tonistiigi/xx + newer Go/Alpine/distroless bases, ensures a nonroot dex user exists in images, bumps gomplate, and threads VERSION into builds; Makefile is reorganized with explicit generate/verify targets, updated tool versions (protoc/kind/golangci-lint), and adds go mod tidy across modules.

Repo hygiene/docs updates: dependabot now includes /examples and groups etcd deps; .golangci.yml is replaced with .golangci.yaml; PR/issue/security templates and README/ADOPTERS links/text are refreshed; protobuf-generated Go files are regenerated with newer protoc/plugins (no API shape change, but new generated code layout).

^{Written by Cursor Bugbot for commit 29c7b6f. This will update automatically on new commits. Configure here.}

cruizen · 2022-10-17T21:28:18Z

Hi @erwinvaneyk , @pshanbhag I don't have write access to the repo and therefore cannot ask for review and / or resolve merge conflicts, it seems.

This PR is in draft state since I see a message that "This branch has conflicts that must be resolved".

cruizen · 2023-10-04T21:17:11Z

This branch has conflicts that must be resolved :-/

bito-code-review · 2025-02-01T18:19:20Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-03T12:28:41Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-04T08:32:41Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-04T10:12:39Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-06T08:19:45Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-06T13:49:47Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-14T22:32:34Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-15T12:52:32Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-16T22:22:32Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-17T16:02:33Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-18T13:31:14Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-19T14:11:01Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-20T16:41:01Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-28T23:45:20Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-03-05T21:29:01Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

…#4524) Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.33 to 1.14.34. - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.33...v1.14.34) --- updated-dependencies: - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.34 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.11.1 to 1.11.2. - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.11.1...v1.11.2) --- updated-dependencies: - dependency-name: github.com/lib/pq dependency-version: 1.11.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.78.0 to 1.79.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.78.0...v1.79.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.79.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.19.1 to 6.19.2. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@601a80b...10e90e3) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 6.19.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Makefile

) Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.33.1 to 0.34.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@b6643a2...c1824fd) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

Signed-off-by: Logan <31484824+loganripplinger@users.noreply.github.com>

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

…ipt (#4542) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>

cursor · 2026-02-15T21:16:48Z

.github/workflows/analysis-scorecard.yaml

+on:
+  branch_protection_rule:
+  push:
+    branches: [ main ]


Scorecard workflow targets main instead of master

Low Severity

The new analysis-scorecard.yaml workflow triggers on pushes to branches: [ main ], but this fork's default branch is master (as seen in ci.yaml). The scorecard push trigger will never fire. The workflow only runs on the weekly schedule and branch_protection_rule events, which may not be the intent.

…0f` (#4546) Bumps distroless/static-debian13 from `f9f84bd` to `01e550f`. --- updated-dependencies: - dependency-name: distroless/static-debian13 dependency-version: nonroot dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.0 to 1.79.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.0...v1.79.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.79.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the etcd group with 2 updates: [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) and [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd). Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.7 to 3.6.8 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.7...v3.6.8) Updates `go.etcd.io/etcd/client/v3` from 3.6.7 to 3.6.8 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.7...v3.6.8) --- updated-dependencies: - dependency-name: go.etcd.io/etcd/client/pkg/v3 dependency-version: 3.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: etcd - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: etcd ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.2 to 4.32.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@45cbd0c...9e907b5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>

.github/workflows/artifacts.yaml

Added steps to fetch and extract OCI image tarball. Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>

cursor · 2026-02-16T14:36:57Z

.github/workflows/artifacts.yaml

+    outputs:
+      name: ${{ steps.image-name.outputs.value }}
+      digest: ${{ steps.build.outputs.digest }}
+      ref: ${{ steps.image-ref.outputs.value }}


Matrix job outputs are non-deterministic across variants

Medium Severity

The container-images job uses a matrix strategy with alpine and distroless variants but defines job-level outputs for digest and ref. GitHub Actions picks outputs from a single arbitrary matrix leg, so the exposed workflow outputs (container-image-digest, container-image-ref) will non-deterministically correspond to either variant. These outputs are part of the workflow_call API contract and could silently produce wrong values for any consumer.

…estamp (#4553) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.13.0 to 1.14.0. - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](helm/kind-action@92086f6...ef37e7f) --- updated-dependencies: - dependency-name: helm/kind-action dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.266.0 to 0.267.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.266.0...v0.267.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-version: 0.267.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

cursor · 2026-02-18T09:17:12Z

.github/workflows/trivydb-cache.yaml

+        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        with:
+          path: ${{ github.workspace }}/.cache/trivy
+          key: cache-trivy-${{ steps.date.outputs.date }}


Trivy cache key prefix mismatch between workflows

Medium Severity

The daily Trivy DB cache workflow saves with key prefix cache-trivy- while the artifacts workflow restores with prefix trivy-cache-. These prefixes are swapped, so the restore-keys: trivy-cache- pattern will never match cache-trivy-* keys. Since the artifacts workflow also sets TRIVY_SKIP_DB_UPDATE: true, the Trivy scan relies entirely on a cached database. On first run or after cache expiry, no database is available and the scan will fail or produce empty results. The cache paths also differ (${{ github.workspace }}/.cache/trivy vs cache/db).

Additional Locations (1)

.github/workflows/artifacts.yaml#L220-L222

cruizen changed the title ~~Merge master~~ Sync with upstream master Oct 17, 2022

cruizen marked this pull request as ready for review October 17, 2022 21:26

cruizen requested review from jayanth-tjvrr and mithilarun October 4, 2023 21:15

cruizen marked this pull request as draft October 4, 2023 21:17

mithilarun previously approved these changes Oct 4, 2023

View reviewed changes

sagikazarmark dismissed mithilarun’s stale review via b3df6aa October 13, 2023 14:27

cruizen marked this pull request as ready for review March 12, 2024 12:47

cruizen requested review from a team, gauravgavhane05 and mithilarun March 13, 2024 09:23

mithilarun previously approved these changes Mar 13, 2024

View reviewed changes

nabokihms dismissed mithilarun’s stale review via 158a2a2 March 22, 2024 06:57

dependabot bot added 5 commits February 12, 2026 12:15

cursor bot reviewed Feb 13, 2026

View reviewed changes

Makefile Show resolved Hide resolved

dependabot bot and others added 7 commits February 13, 2026 13:04

fix: suppress deprecation warning for userAttr when not set (#4539)

489e37d

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

fix: use correct id value for label (#4541)

d90827c

Signed-off-by: Logan <31484824+loganripplinger@users.noreply.github.com>

feat: refactor signer configuration with local and vault options (#4532)

7850337

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

build(gomplate): update gomplate version to v5.0.0 and add update scr…

ad3a83e

…ipt (#4542) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

feat(crd): add CRD handling behavior and configuration options (#4543)

9bee809

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

Add permissions section to trivydb-cache workflow (#4544)

a5f4956

Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>

cursor bot reviewed Feb 15, 2026

View reviewed changes

dependabot bot and others added 6 commits February 16, 2026 08:45

Debug trivy scans (#4545)

eb9f04b

Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>

cursor bot reviewed Feb 16, 2026

View reviewed changes

.github/workflows/artifacts.yaml Show resolved Hide resolved

Add steps to fetch and extract OCI image tarball (#4552)

adec8b4

Added steps to fetch and extract OCI image tarball. Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>

cursor bot reviewed Feb 16, 2026

View reviewed changes

nabokihms and others added 5 commits February 16, 2026 17:16

feat: enhance git-version script to generate pseudo-versions with tim…

955142b

…estamp (#4553) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

build(deps): update gRPC to v1.79.1 and other dependencies (#4554)

dce4638

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

feat: validate redirect URIs and safely append parameters (#4559)

29c7b6f

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

cursor bot reviewed Feb 18, 2026

View reviewed changes

build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4562)

548b0f5

Conversation

cruizen commented Oct 17, 2022 • edited by cursor bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Overview

What this PR does / why we need it

Special notes for your reviewer

Does this PR introduce a user-facing change?

Uh oh!

cruizen commented Oct 17, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cruizen commented Oct 4, 2023

Uh oh!

bito-code-review bot commented Feb 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Feb 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review bot commented Mar 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

Uh oh!

cursor bot Feb 15, 2026

Choose a reason for hiding this comment

Scorecard workflow targets main instead of master

Uh oh!

Uh oh!

cursor bot Feb 16, 2026

cruizen commented Oct 17, 2022 •

edited by cursor bot

Loading

cruizen commented Oct 17, 2022 •

edited

Loading

bito-code-review bot commented Feb 1, 2025 •

edited

Loading

bito-code-review bot commented Feb 3, 2025 •

edited

Loading

bito-code-review bot commented Feb 4, 2025 •

edited

Loading

bito-code-review bot commented Feb 4, 2025 •

edited

Loading

bito-code-review bot commented Feb 6, 2025 •

edited

Loading

bito-code-review bot commented Feb 6, 2025 •

edited

Loading

bito-code-review bot commented Feb 14, 2025 •

edited

Loading

bito-code-review bot commented Feb 15, 2025 •

edited

Loading

bito-code-review bot commented Feb 16, 2025 •

edited

Loading

bito-code-review bot commented Feb 17, 2025 •

edited

Loading

bito-code-review bot commented Feb 18, 2025 •

edited

Loading

bito-code-review bot commented Feb 19, 2025 •

edited

Loading

bito-code-review bot commented Feb 20, 2025 •

edited

Loading

bito-code-review bot commented Feb 28, 2025 •

edited

Loading

bito-code-review bot commented Mar 5, 2025 •

edited

Loading

Scorecard workflow targets `main` instead of `master`