Scorecard supply-chain security

Workflow runs for Scorecard supply-chain security

• chore: move the gitleaks allowlist to the repository root (#3747)

  completed successfully:
  Scorecard supply-chain security#2666:Commit3e125dbpushedbyjiparis
  main

  Oct 28, 20261m 56s
  More actions for workflow run 2666

• ci: limit the default token permissions in release and scorecards (#3…

  completed successfully:
  Scorecard supply-chain security#2665:Commit887227bpushedbyjiparis
  main

  Oct 28, 20262m 38s
  More actions for workflow run 2665

• chore: skip test data and dev-only files in the OpenGrep scan (#3743)

  completed successfully:
  Scorecard supply-chain security#2664:Commit80fedf5pushedbyjiparis
  main

  Oct 28, 20261m 46s
  More actions for workflow run 2664

• ci(codeql): honor alert suppression comments (#3745)

  completed successfully:
  Scorecard supply-chain security#2663:Commitd688340pushedbyjiparis
  main

  Oct 28, 20261m 57s
  More actions for workflow run 2663

• ci: check installer digests before running them (#3744)

  completed successfully:
  Scorecard supply-chain security#2662:Commit753c3d5pushedbyjiparis
  main

  Oct 28, 20261m 53s
  More actions for workflow run 2662

• chore: add root syft config for the source SBOM (#3742)

  completed successfully:
  Scorecard supply-chain security#2661:Commit33f92a0pushedbyjiparis
  main

  Oct 28, 20261m 38s
  More actions for workflow run 2661

• chore: add root Checkov config to skip duplicate and generated findin…

  completed successfully:
  Scorecard supply-chain security#2660:Commit5d79fa4pushedbyjiparis
  main

  Oct 28, 20261m 56s
  More actions for workflow run 2660

• chore: enable pi tracing (#3733)

  completed successfully:
  Scorecard supply-chain security#2659:Commit99b860dpushedbymigmartri
  main

  Oct 27, 20261m 44s
  More actions for workflow run 2659

• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 (…

  completed successfully:
  Scorecard supply-chain security#2658:Commit7666f59pushedbymatiasinsaurralde
  main

  Oct 27, 20261m 39s
  More actions for workflow run 2658

• feat(errorsx): add database and gRPC error stack hooks (#3736)

  completed successfully:
  Scorecard supply-chain security#2657:Commit5baeb3dpushedbymigmartri
  main

  Oct 27, 20261m 45s
  More actions for workflow run 2657

• chore(ci): stop linking the release attestation in release notes (#3737)

  completed successfully:
  Scorecard supply-chain security#2656:Commit61daf66pushedbymigmartri
  main

  Oct 27, 20261m 52s
  More actions for workflow run 2656

• Bump Helm Chart and Dagger Version => v1.128.1 (#3734)

  completed successfully:
  Scorecard supply-chain security#2655:Commite8e6477pushedbyjiparis
  main

  Oct 27, 20261m 47s
  More actions for workflow run 2655

• fix(attestation): avoid logging the raw federated OIDC token (#3732)

  completed successfully:
  Scorecard supply-chain security#2654:Commite8bfa2cpushedbymatiasinsaurralde
  main

  Oct 27, 20261m 54s
  More actions for workflow run 2654

• Scorecard supply-chain security

  completed successfully:
  Scorecard supply-chain security#2653:Scheduled
  main

  Oct 27, 20261m 40s
  More actions for workflow run 2653

• fix(trace): separate Pi cache token accounting (#3719)

  completed successfully:
  Scorecard supply-chain security#2652:Commita00dd1fpushedbymigmartri
  main

  Oct 27, 20261m 38s
  More actions for workflow run 2652

• Bump Helm Chart and Dagger Version => v1.128.0 (#3730)

  completed successfully:
  Scorecard supply-chain security#2651:Commit07fad24pushedbychainloop-eng[bot]Bot
  main

  Oct 26, 20261m 39s
  More actions for workflow run 2651

• fix(trace): keep SSH key fingerprints in redacted sessions (#3712)

  completed successfully:
  Scorecard supply-chain security#2650:Commit9f8be24pushedbymigmartri
  main

  Oct 26, 20261m 50s
  More actions for workflow run 2650

• feat(cas): scope CAS tokens to a single digest (#3711)

  completed successfully:
  Scorecard supply-chain security#2649:Commit8691ea1pushedbymigmartri
  main

  Oct 26, 20262m 18s
  More actions for workflow run 2649

• feat(cli): default to the single-port cp and cas hostnames (#3725)

  completed successfully:
  Scorecard supply-chain security#2648:Commitc777d6apushedbymigmartri
  main

  Oct 26, 20261m 52s
  More actions for workflow run 2648

• chore(deps): bump github.com/go-chi/chi/v5 from 5.3.2 to 5.4.0 (#3729)

  completed successfully:
  Scorecard supply-chain security#2647:Commit32e7986pushedbychainloop-eng[bot]Bot
  main

  Oct 26, 20261m 56s
  More actions for workflow run 2647

• chore(deps): bump the go-minor-and-patch group with 16 updates (#3728)

  completed successfully:
  Scorecard supply-chain security#2646:Commit7bc7477pushedbychainloop-eng[bot]Bot
  main

  Oct 26, 20261m 38s
  More actions for workflow run 2646

• feat(trace): add Pi provider support (#3704)

  completed successfully:
  Scorecard supply-chain security#2645:Commit01d4899pushedbyjiparis
  main

  Oct 23, 20261m 56s
  More actions for workflow run 2645

• feat(trace): skip Claude Code and Cursor hooks when the Chainloop CLI…

  completed successfully:
  Scorecard supply-chain security#2644:Commitb4ed50fpushedbyjiparis
  main

  Oct 23, 20261m 33s
  More actions for workflow run 2644

• Bump Helm Chart and Dagger Version => v1.127.4 (#3710)

  completed successfully:
  Scorecard supply-chain security#2643:Commit768549fpushedbymigmartri
  main

  Oct 23, 20261m 42s
  More actions for workflow run 2643

• fix(trace): record HTML spec materials as HTML (#3709)

  completed successfully:
  Scorecard supply-chain security#2642:Commit72bc01dpushedbyjiparis
  main

  Oct 23, 20261m 36s
  More actions for workflow run 2642