Skip to content

Pull requests: notaryproject/ratify

Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort

Pull requests list

ci: auto cve bump add trivy
#2794 opened Jul 22, 2026 by fseldow Contributor Loading…
5 tasks
chore: Bump github/codeql-action/upload-sarif from 3.28.15 to 4.37.3 dependencies Pull requests that update a dependency file v1
#2789 opened Jul 22, 2026 by dependabot Bot Loading…
chore: Bump actions/checkout from 4.2.2 to 7.0.1 dependencies Pull requests that update a dependency file v1
#2788 opened Jul 22, 2026 by dependabot Bot Loading…
chore: Bump nick-fields/retry from 3.0.2 to 4.0.0 dependencies Pull requests that update a dependency file v1
#2787 opened Jul 22, 2026 by dependabot Bot Loading…
chore: Bump step-security/harden-runner from 2.11.1 to 2.20.0 dependencies Pull requests that update a dependency file v1
#2786 opened Jul 22, 2026 by dependabot Bot Loading…
chore: Bump oras-project/setup-oras from 1.2.2 to 2.0.1 dependencies Pull requests that update a dependency file v1
#2785 opened Jul 22, 2026 by dependabot Bot Loading…
ci: label PRs based on target branch
#2779 opened Jul 21, 2026 by fseldow Contributor Loading…
feat(cosign): allow key-based verification without a timestamp
#2753 opened Jul 20, 2026 by charleswool Contributor Loading…
chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.32.20 to 1.32.30 dependencies Pull requests that update a dependency file
#2738 opened Jul 16, 2026 by dependabot Bot Loading…
chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.28 to 1.19.29 dependencies Pull requests that update a dependency file
#2737 opened Jul 16, 2026 by dependabot Bot Loading…
chore: Bump oras-project/setup-oras from 2.0.0 to 2.0.1 dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
#2727 opened Jul 13, 2026 by dependabot Bot Loading…
fix(notation): reject leaf cert trust anchors
#2723 opened Jul 11, 2026 by fseldow Contributor Loading…
chore: Bump step-security/harden-runner from 2.10.2 to 2.20.0 dependencies Pull requests that update a dependency file
#2718 opened Jul 10, 2026 by dependabot Bot Loading…
chore: Bump codecov/codecov-action from 5.1.2 to 7.0.0 dependencies Pull requests that update a dependency file
#2717 opened Jul 10, 2026 by dependabot Bot Loading…
chore: Bump goreleaser/goreleaser-action from 6.1.0 to 7.2.3 dependencies Pull requests that update a dependency file
#2716 opened Jul 10, 2026 by dependabot Bot Loading…
chore: Bump github.com/spdx/tools-golang from 0.5.5 to 0.5.7 dependencies Pull requests that update a dependency file
#2709 opened Jul 9, 2026 by dependabot Bot Loading…
chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.29 to 1.19.30 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#2705 opened Jul 9, 2026 by dependabot Bot Loading…
Remove invalid tag export from publish workflow
#2686 opened Jul 7, 2026 by Copilot AI Draft
1 of 5 tasks
chore: Bump github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.41.12 dependencies Pull requests that update a dependency file
#2650 opened Jul 2, 2026 by dependabot Bot Loading…
ProTip! Adding no:label will show everything without a label.