Validate GitHub Actions

Workflow runs for Validate GitHub Actions

• chore(deps): update anchore dependencies

  completed successfully:
  Validate GitHub Actions#1784:Pull request#5535synchronizebyanchore-oss-update-bot
  anchore-oss-update-bot:auto/anchore-deps

  Nov 14, 202621s
  More actions for workflow run 1784

• feat(sbomit): add an SBOMit task ingesting in-toto attestations to enrich SBOM identities.

  requires action with the application:
  Validate GitHub Actions#1783:Pull request#5389synchronizebystupendoussuperpowers
  stupendoussuperpowers:sbomit-task

  Nov 14, 2026Action required
  More actions for workflow run 1783

• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.46.0 to 1.47.0

  completed successfully:
  Validate GitHub Actions#1782:Pull request#5575openedbydependabot[bot]Bot
  dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.47.0

  Nov 14, 202623s
  More actions for workflow run 1782

• fix(python): keep single-character names in requirements.txt

  completed successfully:
  Validate GitHub Actions#1781:Pull request#5469reopenedbywillmurphyscode
  protonnegativo:fix/requirements-single-char-name

  Nov 13, 202623s
  More actions for workflow run 1781

• fix: skip Linux release identification if there is nothing to parse

  completed successfully:
  Validate GitHub Actions#1780:Pull request#5482synchronizebywillmurphyscode
  caleballen:fix/skip-release-if-no-parsers

  Nov 13, 202626s
  More actions for workflow run 1780

• exclude npm devOptional dependencies by default

  requires action with the application:
  Validate GitHub Actions#1779:Pull request#5065synchronizebyKunalbehbud
  Kunalbehbud:npm-exclude-dev-optional

  Nov 13, 2026Action required
  More actions for workflow run 1779

• fix: use pointer receiver for FileResolver to enable reuse

  completed successfully:
  Validate GitHub Actions#1778:Pull request#5483reopenedbywillmurphyscode
  caleballen:fix/use-pointer-for-file-resolver

  Nov 13, 202624s
  More actions for workflow run 1778

• fix(python): sort uv.lock extras by name so the SBOM output is stable

  completed successfully:
  Validate GitHub Actions#1777:Pull request#5468reopenedbywillmurphyscode
  wleeaf:fix-uv-extras-order

  Nov 13, 202624s
  More actions for workflow run 1777

• fix(cyclonedx): decode evidence occurrence locations

  completed successfully:
  Validate GitHub Actions#1776:Pull request#5114synchronizebyspiffcs
  Eljees:agent/cyclonedx-evidence-locations

  Nov 13, 202620s
  More actions for workflow run 1776

• fix(cyclonedx): decode evidence occurrence locations

  completed successfully:
  Validate GitHub Actions#1775:Pull request#5114synchronizebyspiffcs
  Eljees:agent/cyclonedx-evidence-locations

  Nov 13, 202627s
  More actions for workflow run 1775

• fix(cyclonedx): decode evidence occurrence locations

  completed successfully:
  Validate GitHub Actions#1774:Pull request#5114synchronizebyspiffcs
  Eljees:agent/cyclonedx-evidence-locations

  Nov 13, 202624s
  More actions for workflow run 1774

• fix(cyclonedx): decode evidence occurrence locations

  requires action with the application:
  Validate GitHub Actions#1773:Pull request#5114synchronizebyspiffcs
  Eljees:agent/cyclonedx-evidence-locations

  Nov 13, 2026Action required
  More actions for workflow run 1773

• git bin not detected by bin classifier , fixed #5573

  requires action with the application:
  Validate GitHub Actions#1772:Pull request#5574openedbyrezmoss
  rezmoss:nov1326-1

  Nov 13, 2026Action required
  More actions for workflow run 1772

• chore(deps): bump zizmorcore/zizmor-action from 0.8.0 to 0.8.1 (#5571)

  completed successfully:
  Validate GitHub Actions#1771:Commit2f3e745pushedbyoss-auto-merger[bot]Bot
  main

  Nov 13, 202626s
  More actions for workflow run 1771

• chore(deps): bump sigstore/cosign-installer from 4.1.2 to 4.1.3 (#5569)

  completed successfully:
  Validate GitHub Actions#1770:Commit2a1185apushedbyoss-auto-merger[bot]Bot
  main

  Nov 13, 202620s
  More actions for workflow run 1770

• chore(deps): bump docker/login-action from 4.7.0 to 4.8.0 (#5570)

  completed successfully:
  Validate GitHub Actions#1769:Commit512a7f2pushedbyoss-auto-merger[bot]Bot
  main

  Nov 13, 202621s
  More actions for workflow run 1769

• chore(deps): bump modernc.org/sqlite from 1.61.0 to 1.61.1

  completed successfully:
  Validate GitHub Actions#1768:Pull request#5572openedbydependabot[bot]Bot
  dependabot/go_modules/modernc.org/sqlite-1.61.1

  Nov 13, 202622s
  More actions for workflow run 1768

• chore(deps): bump zizmorcore/zizmor-action from 0.8.0 to 0.8.1

  completed successfully:
  Validate GitHub Actions#1767:Pull request#5571openedbydependabot[bot]Bot
  dependabot/github_actions/zizmorcore/zizmor-action-0.8.1

  Nov 13, 202621s
  More actions for workflow run 1767

• chore(deps): bump docker/login-action from 4.7.0 to 4.8.0

  completed successfully:
  Validate GitHub Actions#1766:Pull request#5570openedbydependabot[bot]Bot
  dependabot/github_actions/docker/login-action-4.8.0

  Nov 13, 202620s
  More actions for workflow run 1766

• chore(deps): bump sigstore/cosign-installer from 4.1.2 to 4.1.3

  completed successfully:
  Validate GitHub Actions#1765:Pull request#5569openedbydependabot[bot]Bot
  dependabot/github_actions/sigstore/cosign-installer-4.1.3

  Nov 13, 202626s
  More actions for workflow run 1765

• chore(deps): update tool versions

  completed successfully:
  Validate GitHub Actions#1764:Pull request#5568openedbyanchore-oss-update-bot
  anchore-oss-update-bot:auto/tool-updates

  Nov 13, 202624s
  More actions for workflow run 1764

• chore(deps): update anchore dependencies

  completed successfully:
  Validate GitHub Actions#1763:Pull request#5535synchronizebyanchore-oss-update-bot
  anchore-oss-update-bot:auto/anchore-deps

  Nov 13, 202620s
  More actions for workflow run 1763

• fix: report dpkg packages listed in both status and status.d once

  completed successfully:
  Validate GitHub Actions#1762:Pull request#5565synchronizebywagoodman
  feature/dpkg-status-d-merge

  Nov 12, 20261m 18s
  More actions for workflow run 1762

• fix(cyclonedx): decode evidence occurrence locations

  completed successfully:
  Validate GitHub Actions#1761:Pull request#5114synchronizebyspiffcs
  Eljees:agent/cyclonedx-evidence-locations

  Nov 12, 202625s
  More actions for workflow run 1761

• fix: accept hyphenated and multi-label email domains in SPDX originator/supplier parsing

  completed successfully:
  Validate GitHub Actions#1760:Pull request#5442synchronizebyspiffcs
  choksi2212:fix/spdx-email-domain-pattern-5439

  Nov 12, 202628s
  More actions for workflow run 1760