Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
chainguard-dev
/
stigs
Public
Notifications
You must be signed in to change notification settings
Fork
15
Star
25
Code
Issues
0
Pull requests
2
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Actions: chainguard-dev/stigs
Actions
All workflows
Workflows
Prepare Release
Prepare Release
Action Lint
Action Lint
CodeQL
CodeQL
Create Release
Create Release
Dependabot Updates
Dependabot Updates
Dependency Graph
Dependency Graph
E2E Scan
E2E Scan
Offline Scan
Offline Scan
Verify CA bundle stamp and re-pin fixture base images
Verify CA bundle stamp and re-pin fixture base images
Zizmor
Zizmor
Show more workflows...
Management
Caches
Zizmor
Zizmor
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
zizmor.yaml
will be ignored since log searching is not yet available
81 workflow runs
81 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Merge pull request #159 from chainguard-dev/dependabot/github_actions…
Zizmor
#81:
Commit
ae9ad73
pushed by
stevebeattie
32s
main
main
32s
View workflow file
Make the trust-store sidecar guard reachable, format-aware and testable
Zizmor
#80:
Pull request
#160
opened by
stevebeattie
25s
stevebeattie:fix-stamp-guard
stevebeattie:fix-stamp-guard
25s
View #160
View workflow file
chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 in the actions group
Zizmor
#79:
Pull request
#159
opened by
dependabot
Bot
24s
dependabot/github_actions/actions-bbf0ab0fb3
dependabot/github_actions/actions-bbf0ab0fb3
24s
View #159
View workflow file
Merge pull request #152 from chainguard-dev/dependabot/github_actions…
Zizmor
#78:
Commit
7526bd6
pushed by
egibs
29s
main
main
29s
View workflow file
chore(deps): bump chainguard-dev/actions/setup-gitsign from 1.6.30 to 1.6.31 in the actions group
Zizmor
#77:
Pull request
#152
opened by
dependabot
Bot
27s
dependabot/github_actions/actions-3e03695dbc
dependabot/github_actions/actions-3e03695dbc
27s
View #152
View workflow file
Merge pull request #142 from xnox/cabundle-hash-from-stamp-file
Zizmor
#76:
Commit
04abb36
pushed by
xnox
33s
main
main
33s
View workflow file
Read trust-store hashes from package stamp files instead of pinning them
Zizmor
#75:
Pull request
#142
synchronize by
xnox
31s
xnox:cabundle-hash-from-stamp-file
xnox:cabundle-hash-from-stamp-file
31s
View #142
View workflow file
Merge pull request #146 from chainguard-dev/dependabot/github_actions…
Zizmor
#74:
Commit
1989718
pushed by
egibs
34s
main
main
34s
View workflow file
chore(deps): bump the actions group across 1 directory with 3 updates
Zizmor
#73:
Pull request
#146
opened by
dependabot
Bot
39s
dependabot/github_actions/actions-c4708e4192
dependabot/github_actions/actions-c4708e4192
39s
View #146
View workflow file
chore(deps): bump the actions group with 2 updates
Zizmor
#72:
Pull request
#144
opened by
dependabot
Bot
29s
dependabot/github_actions/actions-3705ca9558
dependabot/github_actions/actions-3705ca9558
29s
View #144
View workflow file
Read trust-store hashes from package stamp files instead of pinning them
Zizmor
#71:
Pull request
#142
opened by
xnox
28s
xnox:cabundle-hash-from-stamp-file
xnox:cabundle-hash-from-stamp-file
28s
View #142
View workflow file
Merge pull request #138 from chainguard-dev/dependabot/github_actions…
Zizmor
#70:
Commit
864f4ad
pushed by
egibs
28s
main
main
28s
View workflow file
chore(deps): bump chainguard-dev/actions/setup-gitsign from 1.6.28 to 1.6.29 in the actions group
Zizmor
#69:
Pull request
#138
opened by
dependabot
Bot
36s
dependabot/github_actions/actions-4929d052fb
dependabot/github_actions/actions-4929d052fb
36s
View #138
View workflow file
Merge pull request #137 from chainguard-dev/dependabot/github_actions…
Zizmor
#68:
Commit
6794894
pushed by
stevebeattie
30s
main
main
30s
View workflow file
chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 in the actions group
Zizmor
#67:
Pull request
#137
opened by
dependabot
Bot
34s
dependabot/github_actions/actions-f3655a3fd2
dependabot/github_actions/actions-f3655a3fd2
34s
View #137
View workflow file
Merge pull request #135 from chainguard-dev/dependabot/github_actions…
Zizmor
#66:
Commit
4ecd8ff
pushed by
egibs
31s
main
main
31s
View workflow file
chore(deps): bump the actions group across 1 directory with 2 updates
Zizmor
#65:
Pull request
#135
opened by
dependabot
Bot
26s
dependabot/github_actions/actions-deaec5d3da
dependabot/github_actions/actions-deaec5d3da
26s
View #135
View workflow file
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the actions group
Zizmor
#64:
Pull request
#133
opened by
dependabot
Bot
25s
dependabot/github_actions/actions-7a5a078ad4
dependabot/github_actions/actions-7a5a078ad4
25s
View #133
View workflow file
Merge pull request #130 from chainguard-dev/dependabot/github_actions…
Zizmor
#63:
Commit
c3cc0e3
pushed by
egibs
29s
main
main
29s
View workflow file
Merge pull request #131 from chainguard-dev/dependabot/github_actions…
Zizmor
#62:
Commit
f6d5da1
pushed by
egibs
24s
main
main
24s
View workflow file
chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0
Zizmor
#61:
Pull request
#131
opened by
dependabot
Bot
24s
dependabot/github_actions/actions/setup-go-7.0.0
dependabot/github_actions/actions/setup-go-7.0.0
24s
View #131
View workflow file
chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 in the actions group
Zizmor
#60:
Pull request
#130
opened by
dependabot
Bot
40s
dependabot/github_actions/actions-053fcd7467
dependabot/github_actions/actions-053fcd7467
40s
View #130
View workflow file
Merge pull request #129 from chainguard-dev/dependabot/github_actions…
Zizmor
#59:
Commit
d21f208
pushed by
xnox
30s
main
main
30s
View workflow file
chore(deps): bump chainguard-dev/actions/setup-gitsign from 1.6.26 to 1.6.27 in the actions group
Zizmor
#58:
Pull request
#129
opened by
dependabot
Bot
33s
dependabot/github_actions/actions-3611ef47a5
dependabot/github_actions/actions-3611ef47a5
33s
View #129
View workflow file
Merge pull request #124 from egibs/automate-offline-test-pin
Zizmor
#57:
Commit
d79caed
pushed by
egibs
23s
main
main
23s
View workflow file
Previous
1
2
3
4
Next
You can’t perform that action at this time.