ngmi / ossf / allstar

ossf/allstar

Go 1.4k stars

GitHub App to set and enforce security policies

✓ Synced 4h ago Share on X →
README badge: [![ngmi](https://ngmi.review/badge/ossf/allstar.svg)](https://ngmi.review/repo/ossf/allstar)
415 Merged PRs
8 days Avg Merge Time
0m Fastest PR
5 months Slowest PR
#543 Global Speed Rank

Top Reviewers

#1 @jeffmendoza
@jeffmendoza
299 reviews ✓ 217 approved ↺ 16 blocked
#2
@justaugustus
112 reviews ✓ 102 approved ↺ 5 blocked
#3 @azeemshaikh38
@azeemshaikh38
45 reviews ✓ 18 approved
#4
@laurentsimon
27 reviews ✓ 21 approved
#5 @yorinasub17
@yorinasub17
22 reviews ✓ 1 approved
#6 @inferno-chromium
@inferno-chromium
21 reviews ✓ 12 approved
#7 @dlorenc
@dlorenc
16 reviews ✓ 14 approved
#8
@
13 reviews ✓ 5 approved
#9
@markdboyd
8 reviews
#10
@serb-google
8 reviews

Recent Merged PRs

# Title Author Time Reviews Blocks
#778 build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 in the gomod group @dependabot 2.1h 1 ✓
#776 build(deps): bump the github-owned group across 1 directory with 3 updates @dependabot 14 days 1 ✓
#775 build(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 in the github-actions group @dependabot 14 days 1 ✓
#771 build(deps): bump github.com/rhysd/actionlint from 1.7.9 to 1.7.10 in the gomod group @dependabot 3.7h 1 ✓
#769 build(deps): bump the github-owned group with 2 updates @dependabot 21 days 1 ✓
#768 build(deps): bump step-security/harden-runner from 2.13.3 to 2.14.0 in the github-actions group @dependabot 21 days 1 ✓
#766 build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 in the golang-x group @dependabot 3.7h 1 ✓
#767 build(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 in the golangci group @dependabot 3.6h 1 ✓
#765 build(deps): bump the github-owned group with 3 updates @dependabot 3.6h 1 ✓
#764 build(deps): bump gocloud.dev from 0.43.0 to 0.44.0 in the gomod group @dependabot 3.6h 1 ✓
#763 build(deps): bump step-security/harden-runner from 2.13.2 to 2.13.3 in the github-actions group @dependabot 3.6h 1 ✓
#761 build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 in the golangci group @dependabot 6 days 1 ✓
#760 build(deps): bump the github-owned group with 3 updates @dependabot 1 day 1 ✓
#759 build(deps): bump the gomod group with 2 updates @dependabot 1 day 1 ✓
#758 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 @dependabot 12.5h 1 ✓
#757 build(deps): bump the github-owned group with 2 updates @dependabot 2.5h 1 ✓
#756 build(deps): bump github.com/ossf/scorecard/v5 from 5.3.0 to 5.4.0 in the gomod group @dependabot 2.5h 1 ✓
#755 build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 in the golangci group @dependabot 3.7h 1 ✓
#754 build(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2 in the github-actions group @dependabot 3.7h 1 ✓
#753 build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 in the golang-x group @dependabot 4.0h 1 ✓