prisma-risk / tsoracle

95%

main: 95%

LAST BUILD ON BRANCH worktree-add-scorecard-workflow

branch: worktree-add-scorecard-workflow

CHANGE BRANCH

x

Reset

• worktree-add-scorecard-workflow
• chore/deepwiki-steering
• chore/devin-wiki-update
• chore/fuzz-cargo-lock-resync
• chore/fuzz-lockfile-automation
• chore/fuzz-test-survey
• chore/gitignore-claude
• chore/husky-prepare-commit-msg-signoff
• chore/lint-panic-policy
• chore/pages-build-check-permissions
• chore/pages-workflow-hardening
• chore/perf-critical-path-audit
• chore/perf-critical-path-guard
• chore/pr-template-post-merge-followups
• chore/pre-commit-hook
• chore/release-plz-commit-filter
• chore/release-plz-independent-versions
• chore/release-plz-restore-tsoracle
• chore/release-plz-setup
• chore/release-plz-skip-tsoracle-bin
• chore/seed-changelogs
• chore/sha-pin-actions
• chore/update-ts-header
• ci/cache-apt-system-deps
• ci/exclude-benchmarks-coverage
• ci/force-node24-runtime
• ci/free-disk-space
• ci/free-disk-space-coverage-job
• ci/kube-e2e-pr-trigger
• ci/lsan-nightly-leak-check
• ci/openssf-silver-pr3-signed-tags
• ci/release-images-per-arch-matrix
• ci/release-plz-app-token
• ci/release-plz-fuzz-lockfile-sync
• ci/release-plz-job-concurrency
• ci/rust-cache-node24
• ci/stress-pipeline-and-docs
• codex/staging-get-ts-smoke
• dependabot/cargo/fuzz/fuzz-9a0cd8e38c
• dependabot/docker/deploy/docker-b97919ffb4
• dependabot/github_actions/github-actions-0b7eb04c24
• dependabot/github_actions/github-actions-0fdcbaaf78
• dependabot/github_actions/github-actions-75c32984bd
• dependabot/github_actions/github-actions-79d6f58968
• deps/upgrade-rocksdb
• design/site-refresh
• diag/paxos-coverage-hang
• docs-getseq
• docs-keyed-dense-sequence
• docs/CONTRIBUTING.md
• docs/add-openssf-scorecard-badge
• docs/badge-download
• docs/bestpractices-json
• docs/bestpractices-json-under-size-cap
• docs/clarify-monotonic-contract
• docs/client-driver-deep-dive
• docs/docs-release-signatures.md
• docs/driver-comparison
• docs/example-prometheus-metrics
• docs/failpoint-feature-unification
• docs/fence-lock-ordering-invariant
• docs/fix
• docs/header
• docs/interface-reference
• docs/issue-templates
• docs/leadership-events-first-item-contract
• docs/log-store-fsync-policy
• docs/openraft-examples-followup
• docs/openraft-integration-doc-rot
• docs/openssf-best-practices-badge
• docs/openssf-silver-pr2-dco
• docs/openssf-silver-pr4-bestpractices-refresh
• docs/paxos-readmes-and-driver-choice
• docs/paxos-standalone-unauth-hardening
• docs/per-crate-readmes
• docs/persist-high-water-epoch-contract
• docs/proto-comments
• docs/readme-badges
• docs/readme-examples-descriptions
• docs/readme-highlights-audit
• docs/readme-logo
• docs/readme-stress-topologies
• docs/readme-tsoracle-serve-default
• docs/rocksdb-build-prereqs
• docs/site-paxos-driver-landed
• docs/update-badge-crates-ios
• docs/zola-bump-procedure
• e2e/kube-membership-soak
• explore/bt-placement
• feat-configurable-max-seq-count
• feat-dense-openraft
• feat/advance-payload-merge
• feat/benchmarks-minimal
• feat/bt-cargo-feature
• feat/client-cached-leader
• feat/client-instrumentation
• feat/client-respond-cancellation-metric
• feat/client-server-tls-transport
• feat/codec-schema-version
• feat/commit-extension-outcome
• feat/dynamic-membership
• feat/e2e-mixed-version-mode
• feat/e2e-version-alias
• feat/failpoint-testing
• feat/format-migration-p2
• feat/format-migration-p3
• feat/format-migration-p4
• feat/format-migration-p5
• feat/format-migration-p6
• feat/format-migration-p7
• feat/fuzz-testing
• feat/get-current-max-safe-rpc
• feat/heartbeat-log
• feat/leader-hint-endpoint-epoch
• feat/mem-network-transfer-leader
• feat/membership-driven-peer-addressing
• feat/openraft-codec-adoption
• feat/openraft-driver-examples
• feat/openraft-snapshot-persistence
• feat/openraft-toolkit
• feat/openraft-toolkit-log-store-failpoints
• feat/pages-site
• feat/paxos-codec-version-byte
• feat/paxos-driver-apply
• feat/paxos-driver-impl
• feat/paxos-driver-scaffold
• feat/paxos-driver-tests
• feat/paxos-embedded
• feat/paxos-examples
• feat/paxos-piggyback
• feat/paxos-toolkit-codec
• feat/paxos-toolkit-fakes
• feat/paxos-toolkit-lifecycle
• feat/paxos-toolkit-scaffold
• feat/paxos-toolkit-storage
• feat/paxos-toolkit-tests
• feat/post-merge-followup-workflow
• feat/postcard-migration
• feat/reflection
• feat/release-images-umbrella
• feat/server-fence-yieldpoint
• feat/server-metrics-emission
• feat/server-subscribe
• feat/shutdown-signal-helper
• feat/site-paxos-post
• feat/snapshot-persistence-health-metrics
• feat/standalone-deploy
• feat/stress-cross-client-realtime-monotonicity
• feat/stress-harness-mem
• feat/stress-harness-process-topology
• feat/stress-harness-raft
• feat/stress-paxos-topology
• feat/tso-peer-core
• feat/tsoracle-driver-openraft
• feat/tsoracle-failpoint-crate
• feat/tsoracle-standalone
• feat/tsoracle-standalone-tls
• feat/unify-highwater-advance-naming
• feat/versioned-codec
• fix-seq-ride-out-flake
• fix/active-write-version-recovery-bounds
• fix/admin-mtls-secure-default
• fix/allocator-count-guard-dedup
• fix/allocator-normalize-stored-logical
• fix/append-error-fence-classification
• fix/apply-task-recovery-cursor
• fix/barrier-seq-durable-seed
• fix/bench-latency-warmup
• fix/buf-setup-action-token
• fix/cargo-deny-toolchain-noise
• fix/channel-double-connect-race
• fix/channel-pool-failed-dial-leak
• fix/channel-pool-hint-cap
• fix/channelpool-evict-dead-channels
• fix/clear-leader-over-invalidation
• fix/client-absolute-redirect-cap
• fix/client-drop-async-trait
• fix/client-error-signal-loss
• fix/client-ride-out-election
• fix/client-rpc-deadlines
• fix/clock-now-ms-saturate
• fix/clone-client-error-metadata
• fix/coalescing-driver-backpressure
• fix/codec-trailing-bytes
• fix/coverage-backpressure-flake
• fix/crates-io-readme
• fix/critical-path-scan-window
• fix/decode-without-unwraps
• fix/deterministic-backpressure-test
• fix/driver-openraft-multi-threaded-cf-feature
• fix/fence-enter-fencing
• fix/fence-transient-exhaustion
• fix/fence-transient-recovery
• fix/fence-yieldpoint-test-fakes
• fix/fenced-epoch-leader-hint
• fix/file-driver-lock
• fix/file-driver-windows-rename-durability
• fix/flaky-bind-race
• fix/follower-endpoint-epoch-contract
• fix/format-activation-target-lower-bound
• fix/get-current-max-safe-deadlines
• fix/get-ts-requests-total
• fix/gitsign-tag-offline-rekor-mode
• fix/helm-peer-mtls-default
• fix/high-water-range-checked-before-persist
• fix/image-data-dir-ownership
• fix/install-snapshot-meta-validation
• fix/iter-round-robin-rotation
• fix/kube-soak-error-tolerance
• fix/leader-cache-cas-atomic
• fix/leader-cache-epochless-flap
• fix/leader-hint-epoch-ttl
• fix/leader-hint-epoch-wire
• fix/leader-hint-metadata-key
• fix/leader-hint-redirect-cap
• fix/leadership-events-dedup-term-coalesce
• fix/log-store-durable-truncate-purge
• fix/log-store-meta-versioned
• fix/makefile-release-crates-package-name
• fix/mem-storage-compaction-floor
• fix/og-image-font
• fix/openraft-driver-linearizable-read
• fix/openraft-meta-doc-format
• fix/openraft-peer-rpc-deadline
• fix/openraft-standalone-harden-peer-transport
• fix/operations-md-server-doclink
• fix/paxos-apply-task-shutdown-permit
• fix/paxos-barrier-seq-recovery
• fix/paxos-barrier-wait-liveness
• fix/paxos-blocking-reads-missed-notify
• fix/paxos-encode-epoch-truncation
• fix/paxos-failpoint-test-isolation
• fix/paxos-leadership-events-resubscribe
• fix/paxos-leadership-lease-observability
• fix/paxos-lease-generation-wrap
• fix/paxos-linearized-barrier
• fix/paxos-piggyback-deterministic-tests
• fix/paxos-runner-send-deadlock
• fix/paxos-runner-start-guard
• fix/paxos-shutdown-coverage-timeout
• fix/paxos-single-active-stream-lease
• fix/paxos-snapshot-policy-restart
• fix/paxos-stress-scheme-less-leader-hint
• fix/paxos-toolkit-dead-macro
• fix/paxos-toolkit-test-fakes-gating
• fix/peer-listener-secure-by-default
• fix/per-attempt-deadline-doubling
• fix/piggyback-serving-wait
• fix/poison-on-leader-watch-eof
• fix/post-merge-followup-parser-section-anchor
• fix/prepare-window-extension-not-leader
• fix/proto-publish-leader-hint-api
• fix/raft-fatal-permanent-driver
• fix/record-success-epoch-monotone
• fix/reflection-descriptor-startup-error
• fix/release-images-tag-suffix-injection
• fix/release-plz-client-id
• fix/release-pr-token-exposure
• fix/remove-unused-prod-deps
• fix/restart-leader-watch-after-fence
• fix/ride-out-election-signal-survives-timeout
• fix/rocksdb-log-cursor-phantom-tail
• fix/rocksdb-paxos-log-idx-reset
• fix/rotation-skip-live-peer
• fix/scorecard-codeql-upload-sarif-sha
• fix/scorecard-pinned-slsa-generator
• fix/serve-shutdown-listener
• fix/serve-surface-drain-error
• fix/server-poison-state-on-leader-watch-panic
• fix/shutdown-hung-driver-timeout
• fix/sigterm-shutdown
• fix/smoke-port-probe-race
• fix/snapshot-publish-toctou
• fix/stale-leader-hint-drops-last-err
• fix/standalone-stale-shutdown-permit
• fix/standalone-start-already-running
• fix/standalone-test-port-lease-toctou
• fix/stress-cfg-unix-process
• fix/stress-killer-monotonicity
• fix/stress-nightly
• fix/stress-nightly-dispatch-filter
• fix/stress-smoke-followups
• fix/stress-tests-env-robustness
• fix/submit-advance-barrier-nonce
• fix/three-node-promise-race
• fix/tls-reject-plaintext-leader-hint
• fix/transport-fanout-error-241
• fix/unknown-epoch-hint-downgrade
• fix/watchguard-drop-sync-stepdown
• fix/widen-epoch-u128
• fix/window-extension-overflow-operands
• fix/window-extension-overflow-report
• fix/window-grant-checked-ctor
• fix/yieldpoint-macro-path-on-new-sites
• fix/yieldpoint-optional-deps
• main
• perf/enforce-hint-cap-on-insert
• perf/is-serving-gate-check
• perf/paxos-next-log-idx-cache
• refactor/advance-cursor-helper
• refactor/advance-out-of-range-variant
• refactor/advance-payload-canonical-path
• refactor/box-err-send-sync
• refactor/clarify-stream-from-receiver-api
• refactor/classify-persist-disposition
• refactor/client-timestamp-range
• refactor/clock-out-of-core
• refactor/collapse-bootstrap-join
• refactor/dedupe-max-timestamps-per-rpc
• refactor/drop-invalid-leader-hint-key-check
• refactor/drop-state-rx
• refactor/flush-deadline-no-expect
• refactor/get-ts-exhaustive-core-status
• refactor/leader-tx-dead-code-101
• refactor/leader-watch-metrics-after-state
• refactor/leadership-naming-applied-fields
• refactor/lift-codec-io-helpers
• refactor/lift-leader-hint-key-to-proto
• refactor/narrow-highwater-host-metrics
• refactor/openraft-log-range-delete
• refactor/partition-parking-lot
• refactor/physical-ms-newtype
• refactor/projected-grant
• refactor/remove-lastmembership-metalabel
• refactor/rename-leader-resolved-to-channel-pool
• refactor/retry-decompose
• refactor/retry-module-split
• refactor/serve-inner-extract
• refactor/server-testkit-dst
• refactor/serving-core
• refactor/split-consensus-modules
• refactor/standalone-host-apply-handle
• refactor/test-bootstrap-helper
• refactor/tsoracle-tests-crate
• release-plz-2026-05-21T20-14-20Z
• release-plz-2026-05-21T20-49-41Z
• release-plz-2026-05-21T21-21-10Z
• release-plz-2026-05-21T21-51-24Z
• release-plz-2026-05-22T04-42-07Z
• release-plz-2026-05-22T06-27-10Z
• release-plz-2026-05-22T16-00-49Z
• release-plz-2026-05-22T20-40-50Z
• release-plz-2026-05-23T04-43-26Z
• release-plz-2026-05-23T21-27-54Z
• release-plz-2026-05-23T23-18-47Z
• release-plz-2026-05-24T06-12-10Z
• release-plz-2026-05-24T19-11-16Z
• release-plz-2026-05-24T20-03-59Z
• release-plz-2026-05-25T05-25-40Z
• release-plz-2026-05-25T21-30-05Z
• release-plz-2026-05-26T00-28-21Z
• release-plz-2026-05-26T06-00-55Z
• release-plz-2026-05-26T15-08-07Z
• release-plz-2026-05-26T22-42-51Z
• release-plz-2026-05-26T23-23-06Z
• release-plz-2026-05-27T01-08-30Z
• release-plz-2026-05-27T03-39-25Z
• release-plz-2026-05-30T01-54-18Z
• release-plz-2026-05-30T08-08-56Z
• release-plz-2026-05-30T08-32-04Z
• reliability/leader-watch-cancel
• test/build-in-process-port-leases
• test/codec-roundtrip-fuzz
• test/coverage-improvements
• test/coverage-round-2
• test/deterministic-sweep
• test/dst-client-e2e-freshness
• test/dst-leadership-churn
• test/dst-stampede
• test/eks-e2e-deploy
• test/kube-e2e-harness
• test/kube-e2e-impl
• test/kube-e2e-mixed-version-soak
• test/kube-e2e-sigkill-leader
• test/openraft-entry-fuzz
• test/openraft-membership-port-race
• test/openraft-meta-fuzz
• test/openraft-virtual-time
• test/paxos-deterministic-harness
• test/paxos-fuzz-targets
• test/paxos-shutdown-flake
• test/raise-coverage
• test/restart-barrier-seq-step
• test/retire-synthetic-mixed-version-soak
• test/tighten-soak-error-budgets
• test/tls-coverage-followup
• worktree-cargo-husky-hooks
• worktree-chore+bump-to-1.0
• worktree-chore+scorecard-hardening
• worktree-ci-parallel-jobs
• worktree-docs+consensus-readme-truth-up
• worktree-docs+contributing-test-policy
• worktree-docs+openssf-contribution-gaps
• worktree-docs+website-obtain-feedback-contribute
• worktree-docs-add-maintainers
• worktree-document-slsa-pin-tradeoff
• worktree-e2e-kube-networkpolicy-probe
• worktree-e2e-kube-tls-lane
• worktree-exclude-e2e-coverage
• worktree-feat+keyed-dense-sequence
• worktree-fix+codeql-unused-variables
• worktree-fix+tls-e2e-membership-san-mismatch
• worktree-fix-issue-4-allocator-expect
• worktree-issue-554
• worktree-openssf-silver-badge
• worktree-reapply-1.0.0-stabilization
• worktree-refactor+advance-out-of-range-variant
• worktree-refactor+service-endpoint-newtype
• worktree-refactor+window-grant-new-unchecked
• worktree-revert-1.0.0-stabilization
• worktree-signed-releases-immutable-fix
• worktree-signed-releases-slsa
• worktree-signed-releases-upload-assets-perms
• worktree-signing-in-release-plz

Build # 26464032881

Build Type

Pull #494

github

Committed by web-flow

Commit Message

Merge 0045af5a8 into d8ca86c0b

Pull Request Pull Request #494: ci: add OpenSSF Scorecard supply-chain analysis workflow

Coverage Stats

13296 of 13974 relevant lines covered (95.15%)

437138.85 hits per line