peczenyj / lua-gdpr-iab-tcfv2

90%

LAST BUILD ON BRANCH devel

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• devel
• exp/lua-5-5-compatibility
• feat/phase-6-performance
• main
• refs/pull/10/merge
• refs/pull/11/merge
• refs/pull/12/merge
• refs/pull/13/merge
• refs/pull/14/merge
• refs/pull/15/merge
• refs/pull/16/merge
• refs/pull/17/merge
• refs/pull/18/merge
• refs/pull/19/merge
• refs/pull/20/merge
• refs/pull/21/merge
• refs/pull/22/merge
• refs/pull/23/merge
• refs/pull/24/merge
• refs/pull/25/merge
• refs/pull/6/merge
• refs/pull/8/merge
• refs/pull/9/merge
• refs/tags/v0.1.0
• refs/tags/v0.2.0
• refs/tags/v0.2.1

Build # 26043197597

Build Type

push

github

Committed by web-flow

Commit Message

chore(security): SLSA Build L2 claim, action SHA-pinning, and OpenSSF Scorecard (#25)

* docs(security): claim SLSA Build Level 2 for releases

State the SLSA v1.0 Build Track Level 2 claim explicitly in README.md
(badge, Features bullet, Supply-chain security section) and SECURITY.md
(level, basis for the L2 claim, and the gh >= 2.49 requirement for the
attestation command).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* ci(security): pin GitHub Actions to commit SHAs

Replace mutable tag/branch refs (@v4, @v2, @master, @v1) with full
commit SHAs across all workflows, keeping a version comment for
readability. Immutable refs prevent a compromised or retagged action
from silently entering the build.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* ci(security): add OpenSSF Scorecard workflow and badge

Add the OpenSSF Scorecard analysis workflow (scheduled, on push to the
default branch, and on branch-protection changes) with results published
to the OpenSSF API and the code-scanning dashboard. Add the Scorecard
badge to README.md and note action SHA-pinning in the Supply-chain
security section.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Coverage Stats

557 of 621 relevant lines covered (89.69%)

10503.05 hits per line