Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package github/codeql-action).

Files affected: .github/workflows/scorecard.yml

---

This repository currently has no open or pending branches.

Detected Dependencies

dockerfile (2)

.devcontainer/Dockerfile (2)

• golang 1.25@sha256:36b4f45d2874905b9e8573b783292629bcb346d0a70d8d7150b6df545234818f
• mcr.microsoft.com/vscode/devcontainers/base debian@sha256:36751f1ee2f30745a649afc2b2061f321bacdaa0617159901fe6725b34c93df4

Dockerfile (2)

• golang alpine@sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9
• alpine 3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375

github-actions (5)

.github/workflows/build.yaml (13)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• mislav/bump-homebrew-formula-action v3.6@56a283fa15557e9abaa4bdb63b8212abc68e655c

.github/workflows/codeql.yml (4)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• github/codeql-action v4@1b168cd39490f61582a9beae412bb7057a6b2c4e
• github/codeql-action v4@1b168cd39490f61582a9beae412bb7057a6b2c4e

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• github/codeql-action 4.31.8@1b168cd39490f61582a9beae412bb7057a6b2c4e

.github/workflows/test.yml (16)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c

gomod (1)

go.mod (14)

• go 1.24.0
• go 1.25.5
• github.com/arsham/figurine v1.3.0
• github.com/awalterschulze/gographviz v2.0.3+incompatible
• github.com/briandowns/spinner v1.23.2
• github.com/caarlos0/env/v11 v11.3.1
• github.com/fatih/color v1.18.0
• github.com/hashicorp/copywrite v0.22.0
• github.com/hashicorp/terraform-exec v0.24.0
• github.com/jwalton/go-supportscolor v1.2.0
• github.com/mattn/go-colorable v0.1.14
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• golang.org/x/mod v0.31.0

---

• Check this box to trigger a request for Renovate to run again on this repository