Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package github/codeql-action).

Files affected: .github/workflows/scorecard.yml

---

This repository currently has no open or pending branches.

Detected dependencies

dockerfile

.devcontainer/Dockerfile

• golang 1.24@sha256:ef5b4be1f94b36c90385abd9b6b4f201723ae28e71acacb76d00687333c17282
• mcr.microsoft.com/vscode/devcontainers/base debian@sha256:ce2e9e611939e611b737362c045bb6d3449bb3efb84898525d724aace1737b90

Dockerfile

• golang alpine@sha256:daae04ebad0c21149979cd8e9db38f565ecefd8547cf4a591240dc1972cf1399
• alpine 3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1

github-actions

.github/workflows/build.yaml

• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• mislav/bump-homebrew-formula-action v3.5@37c544ffe02cc3f4eb1987db8fa63c96e0b37098

.github/workflows/codeql.yml

• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action v3@51f77329afa6477de8c49fc9c7046c15b9a4e79d
• github/codeql-action v3@51f77329afa6477de8c49fc9c7046c15b9a4e79d

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/dependency-review-action v4.7.1@da24556b548a50705dd671f47852072ea4c105d9

.github/workflows/scorecard.yml

• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action 3.29.5@51f77329afa6477de8c49fc9c7046c15b9a4e79d

.github/workflows/test.yml

• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5

gomod

go.mod

• go 1.23.0
• go 1.24.5
• github.com/arsham/figurine v1.3.0
• github.com/awalterschulze/gographviz v2.0.3+incompatible
• github.com/briandowns/spinner v1.23.2
• github.com/caarlos0/env/v11 v11.3.1
• github.com/fatih/color v1.18.0
• github.com/hashicorp/copywrite v0.22.0
• github.com/hashicorp/terraform-exec v0.23.0
• github.com/jwalton/go-supportscolor v1.2.0
• github.com/mattn/go-colorable v0.1.14
• github.com/spf13/cobra v1.9.1
• github.com/spf13/pflag v1.0.7
• golang.org/x/mod v0.26.0

---

• Check this box to trigger a request for Renovate to run again on this repository