only-cli bf9fd98137 fix scorecard-action pin: v2 doesn't exist as a tag upstream ...

ossf/scorecard-action only publishes point-release tags (v2.4.4, etc),
no floating v2 major tag, so the workflow failed to even resolve the
action and never published results -- which is why the README badge
showed "invalid repo path". Pin to the v2.4.4 commit SHA instead.

2026-08-19 16:25:14 -04:00

..

workflows

fix scorecard-action pin: v2 doesn't exist as a tag upstream

2026-08-19 16:25:14 -04:00

dependabot.yml

dependabot: weekly update PRs for npm deps and CI actions

2026-08-18 09:42:30 -04:00